CVE-2026-81164

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

CVE-2026-81161

Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0...

CVE-2026-76759

Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...

CVE-2026-76782

Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...

CVE-2026-76756

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

CVE-2026-73475

Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3...

CVE-2026-16647

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

EUVD-2026-69995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-16647

Drupal Disable Login Page (versions 0.0.0 through 1.1.4) contains an Authentication Bypass Using an Alternate Path or Channel flaw. The root cause is a cache invalidation failure : when the module enables login page access restrictions, it does not clear previously cached login page responses. An...

CVE-2026-16647 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-16647 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

kernel: ip6_gre: Use cached t->net in ip6erspan_changelink()

A flaw was found in the Linux kernel's ip6gre module. An unprivileged user could exploit this vulnerability by migrating a network device, causing the ip6erspanchangelink function to incorrectly handle network namespace references. This error leads to a use-after-free condition when the original...

CVE-2026-73475 Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095

Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3...

CVE-2026-73475 Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095

Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3...

CVE-2026-73475

The Commerce PayPal module for Drupal is vulnerable to an Incorrect Authorization issue, which allows for Forceful Browsing . The root cause is that the module fails to sufficiently validate transaction results in certain circumstances, specifically when using the Payflow Link payment gateway. Th...

CVE-2026-73478

Drupal Diff is a contrib module that enables viewing differences between revisions on any entity type. It contains an Incorrect Authorization flaw that allows forceful browsing : the module does not sufficiently restrict access to non-node entity revision diffs . The practical impact is that a us...

CVE-2026-73476

The Drupal External Authentication module, versions 0.0.0 through 2.0.13 , is vulnerable to Privilege Escalation due to improper handling of case sensitivity. The root cause is the module's failure to ensure exact matching of externally supplied identity values when storing and retrieving authent...

CVE-2026-76757 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

CVE-2026-76756

A vulnerability exists in Drupal Gammu SMS Daemon (all versions . ). Rapid7 identifies the root cause as an Improper Restriction of Operations within the Bounds of a Memory Buffer . The project is currently marked as unsupported due to a known security issue that has not been addressed by the mai...