24h | 7d | 30d

CVE-2026-8492

Overview

  • Drupal
  • Translate Drupal with GTranslate
19 May 2026
Published
20 May 2026
Updated
CVSS
Pending
EPSS
0.03%
KEV

Description

Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

Statistics

  • 1 Post
Last activity: 21 hours ago

Fediverse

Profile picture fallback
github.com/ghostwriter @ghostwriter

Patch immediately before public exploits emerge.

drupal.org/sa-core-2026-004

Affected:

- 8.9.0 , < 10.4.10
- 10.5.0 , < 10.5.10
- 10.6.0 , < 10.6.9
- 11.0.0 , < 11.1.10
- 11.2.0 , < 11.2.12
- 11.3.0 , < 11.3.10

CVE-2026-9082 - Highly critical - SQL Injection
CVE-2026-8495 - Missing Authorization
CVE-2026-8493 - XSS
CVE-2026-8492
CVE-2026-8491

#Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-8491

Overview

  • Drupal
  • Node View Permissions
19 May 2026
Published
20 May 2026
Updated
CVSS
Pending
EPSS
0.03%
KEV

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.

Statistics

  • 1 Post
Last activity: 21 hours ago

Fediverse

Profile picture fallback
github.com/ghostwriter @ghostwriter

Patch immediately before public exploits emerge.

drupal.org/sa-core-2026-004

Affected:

- 8.9.0 , < 10.4.10
- 10.5.0 , < 10.5.10
- 10.6.0 , < 10.6.9
- 11.0.0 , < 11.1.10
- 11.2.0 , < 11.2.12
- 11.3.0 , < 11.3.10

CVE-2026-9082 - Highly critical - SQL Injection
CVE-2026-8495 - Missing Authorization
CVE-2026-8493 - XSS
CVE-2026-8492
CVE-2026-8491

#Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-8493

Overview

  • Drupal
  • Colorbox Inline
19 May 2026
Published
20 May 2026
Updated
CVSS
Pending
EPSS
0.03%
KEV

Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: from 0.0.0 before 2.1.1.

Statistics

  • 1 Post
Last activity: 21 hours ago

Fediverse

Profile picture fallback
github.com/ghostwriter @ghostwriter

Patch immediately before public exploits emerge.

drupal.org/sa-core-2026-004

Affected:

- 8.9.0 , < 10.4.10
- 10.5.0 , < 10.5.10
- 10.6.0 , < 10.6.9
- 11.0.0 , < 11.1.10
- 11.2.0 , < 11.2.12
- 11.3.0 , < 11.3.10

CVE-2026-9082 - Highly critical - SQL Injection
CVE-2026-8495 - Missing Authorization
CVE-2026-8493 - XSS
CVE-2026-8492
CVE-2026-8491

#Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

  • 0
  • 0
  • 0
  • 21h ago
Showing 71 to 73 of 73 CVEs