PT-2026-99520

TuxCare rebuilt drupal/shs to address 1 CVE. Fixed in 7.1.10-p1+tuxcare...

PT-2026-99525

TuxCare rebuilt drupal/coffee to address 1 CVE. Fixed in 7.2.3-p1+tuxcare...

DRUPAL-CORE-2026-013

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

drupal-penetration-testing-lab

Drupal Penetration Testing Lab A complete penetration testing...

Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

PT-2026-99415

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

Drupal 10.6.x < 10.6.17 / 11.3.x < 11.3.17 / 11.4.x < 11.4.7 Drupal Vulnerability (SA-CORE-2026-013)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.17, 11.3.x prior to 11.3.17, or 11.4.x prior to 11.4.7. It is, therefore, affected by a vulnerability. - The Drupal project uses the CKEditor library for WYSIWYG editing. CKEdit...

CLSA-2026-1789375926 TuxCare security update for drupal/term_reference_tree (1 CVE)

TuxCare rebuilt drupal/termreferencetree to address 1 CVE. Fixed in 7.1.11-p1+tuxcare...

wappalyzergo v0.3.1

Wappalyzergo A high performance port of the Wappalyzer Technology Detection Library to Go. Inspired by Webanalyze. Uses data from https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer Features Very simple and easy to use, with clean codebase. Normalized regexes +...

PT-2026-97767

TuxCare rebuilt drupal/term reference tree to address 1 CVE. Fixed in 7.1.11-p1+tuxcare...

Exploit for SQL Injection in Drupal

Metasploitable3 — Penetration Test Report Author: Arlen F...

eJPT-Prep-Guide

eJPT-Prep-Guide eJPT Junior Penetration Tester preparation a...

Security Bulletin: The Hub App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Hub App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-42033 DESCRIPTION: Axios is a promise based HT...

Exploit for Unrestricted Upload of File with Dangerous Type in Drupal

Stack/Builder Builder for stack middlewares based on HttpKern...

CVE-2026-87953

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...

CVE-2026-87952

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently prevent reuse of previously accepted SAML assertions. Under certain circumstances, a valid assertion may be...

CVE-2026-87951

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module stores sensitive authentication information in a manner that could allow disclosure to users with access to configuration or related...

CVE-2026-87950

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

CVE-2026-87949

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize certain values derived from SAML assertions before displaying them to users. A malicious identity...

CVE-2026-87948

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize user-supplied data before displaying it in generated HTML leading to a cross-site scripting...