VulnCheck KEV: CVE-2026-80099

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

PT-2026-89264

Name of the Vulnerable Software and Affected Versions Builderall for WordPress versions prior to 3.0.3 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping in the Photo Module attributes setting. This allows authenticated attackers with...

SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize user-supplied data before displaying it in generated HTML leading to a cross-site scripting...

PT-2026-88808

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-71807

The RuoYi-Cloud-Plus software (version

PT-2026-88801

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88809

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-89240

This module enables you to add key-based authentication on a per-user basis. The module doesn't cache per user, potentially allowing an attacker to view another user's authentication keys, if the attacker has the same permissions. This vulnerability is mitigated by the fact that the site must hav...

PT-2026-88807

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-89248

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize certain values derived from SAML assertions before displaying them to users. A malicious identity...

PT-2026-88898

Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2 Description The PayTR Virtual Pos iFrame API WHMCS Module contains a flaw involving the use of a less trusted source, which allows for the exploitation of trusted...

CVE-2026-49314: Out-of-bounds Read

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88793

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

The vulnerability of the ebtables_init() function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ebtablesinit function in the net/bridge/netfilter/ebtables.c module, which is part of Linux’s kernel-based networking functions, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-89244

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange saml module does not sufficiently validate certain user-supplied URLs before performing redirects. An attacker could cause users...

PT-2026-89237

This module enables you to turn a Drupal install into the Central Authentication System CAS Server. It makes your database the primary location for other systems to use for authentication in a SSO environment. The module doesn't sufficiently check the service URL used to redirect the user during...

PT-2026-88803

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134

Update 2026-09-11: Increased risk score to reflect publicly documented methods for developing exploits. This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search. The module doesn't sufficiently sanitize...

PT-2026-88806

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-89247

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize user-supplied data before displaying it in generated HTML leading to a cross-site scripting...