SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134

Update 2026-09-11: Increased risk score to reflect publicly documented methods for developing exploits. This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search. The module doesn't sufficiently sanitize...

CVE-2026-79324: Authorization Bypass Through User-Controlled Key

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 mageplaza/module-gdpr through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to...

PT-2026-88803

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49310: Undefined Security Weakness

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-89242

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange saml module does not correctly restrict access to certain functionality intended for administrative use. This could allow...

PT-2026-89243

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly validate TLS certificates when making outbound HTTPS requests. An attacker in a position to intercept network...

PT-2026-88995

Name of the Vulnerable Software and Affected Versions VLC media player versions 3.0.0 through 3.0.23 Description A memory-safety issue exists when processing media from an attacker-controlled network source. This flaw involves an out-of-bounds read, which may allow a remote attacker to disclose a...

PT-2026-89164

In RuoYi-Cloud-Plus = 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive...

PT-2026-89252

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...

Patreon - Critical - Unsupported - SA-CONTRIB-2026-139

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...

SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly validate TLS certificates when making outbound HTTPS requests. An attacker in a position to intercept network...

SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize user-supplied data before displaying it in generated HTML leading to a cross-site scripting...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106781 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

CVE-2026-41987: Undefined Security Weakness

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88794

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-81644: Undefined Security Weakness

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106785 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

The vulnerability of the net_devmem_bind_dmabuf() function in the net/core/devmem.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the netdevmembinddmabuf function in the net/core/devmem.c module, which is part of Linux’s kernel-based networking functions, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the vgic_its_restore_dte() function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM virtualization subsystem in the 64-bit Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the vgicitsrestoredte function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM 64-bit kernel-based Linux operating system involves the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access...