NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-18260 Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*. 2026-08-25 5.7 NETWORK MEDIUM NVD
CVE-2026-18259 Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from ... 2026-08-25 7.5 NETWORK HIGH NVD
CVE-2026-16646 Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*. 2026-08-25 5.7 NETWORK MEDIUM NVD
CVE-2026-16645 Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects Phot... 2026-08-25 9.1 NETWORK CRITICAL NVD
CVE-2026-16644 Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0. 2026-08-25 9.1 NETWORK CRITICAL NVD
CVE-2026-16643 Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*. 2026-08-25 5.7 NETWORK MEDIUM NVD
CVE-2026-16642 Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*. 2026-08-25 5.7 NETWORK MEDIUM NVD
CVE-2026-16641 Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*. 2026-08-25 9.8 NETWORK CRITICAL NVD
CVE-2026-16640 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected ... 2026-08-25 6.1 NETWORK MEDIUM NVD
CVE-2026-16639 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. Thi... 2026-08-25 9.8 NETWORK CRITICAL NVD
CVE-2026-16638 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This iss... 2026-08-25 6.1 NETWORK MEDIUM NVD
CVE-2026-15917 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (... 2026-08-25 4.7 NETWORK MEDIUM NVD
CVE-2026-15916 Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, fr... 2026-08-25 4.2 NETWORK MEDIUM NVD
CVE-2026-15088 Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*. 2026-08-25 5.7 NETWORK MEDIUM NVD
CVE-2026-80186 A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a... 2026-08-25 7.6 ADJACENT_NETWORK HIGH NVD