CVE-2026-114553 Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...

CVE-2026-114542 Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

CVE-2026-114544 Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243

Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6...

CVE-2026-114545 Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244

Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalendar View versions: from 0.0.0 to 5.2.6...

CVE-2026-107256 Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue affects Shield versions: from 0.0.0 to 1.9.0...

CVE-2026-114572 Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

CVE-2026-114572

The Domain Login Restrict module for Drupal (versions 0.0.0 to 1.5.0) is vulnerable to an Authentication Bypass (CWE-288) because it fails to sufficiently enforce login restrictions when users authenticate via methods other than the standard login form. This allows users to log in to domains they...

EUVD-2026-113523

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

CVE-2026-114572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

CVE-2026-114554 AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1...

CVE-2026-114571 Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252

Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole versions: from 0.0.0 to 1.3.0...

CVE-2026-118539 Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13...

CVE-2026-118541 Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13...

CVE-2026-118542 Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13...

Spray365

What is Spray365? Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts Office 365 / Azure AD. How is Spray365 different from the many other password spraying tools that are already available? Spray365 enables passwords to be sprayed from an "execution plan...

CVE-2026-118555 Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260

Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce License versions: from 0.0.0 to 3.1.1...

CVE-2026-118556 Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6...

CVE-2026-118557 Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6...

CVE-2026-118550 AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

GhidraEmu

GhidraEmu This experimental Ghidra plugin allows you to easily deal with native pcode emulation. No scripts are needed anymore, just use it directly from Ghidra. It can be particularly useful for working with a variety of exotic processors that are not supported by common emulators. If the...