Drupal Vulnerabilities & CVE List (Nov 2026) | CyStack

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

Drupal Vulnerabilities & CVE List (Nov 2026) | CyStack

CVE-2026-3212Tagify - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-013

Exploitation status: Not exploited
Fix: Yes
Affected product: Tagify
Published: 03/25/2026
Severity: Medium

CVE-2026-3211Theme Negotiation by Rules - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-012

Exploitation status: Not exploited
Fix: Yes
Affected product: Theme Negotiation by Rules
Published: 03/25/2026
Severity: Medium

CVE-2026-3210Material Icons - Moderately critical - Access bypass - SA-CONTRIB-2026-011

Exploitation status: Not exploited
Fix: Yes
Affected product: Material Icons
Published: 03/25/2026
Severity: Medium

CVE-2026-2349UI Icons - Critical - Cross-site Scripting - SA-CONTRIB-2026-010

Exploitation status: Not exploited
Fix: Yes
Affected product: UI Icons
Published: 03/25/2026
Severity: Medium

CVE-2026-2348Quick Edit - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-009

Exploitation status: Not exploited
Fix: Yes
Affected product: Quick Edit
Published: 03/25/2026
Severity: Medium

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-3212`Tagify - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-013	Exploitation statusNot exploited	FixYes

`CVE-2026-3211`Theme Negotiation by Rules - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-012	Exploitation statusNot exploited	FixYes	Affected productTheme Negotiation by Rules	Published03/25/2026	SeverityMedium

`CVE-2026-1554`Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007	Exploitation statusNot exploited	FixYes	Affected productCentral Authentication System (CAS) Server	Published02/04/2026	SeverityMedium

`CVE-2026-0948`Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005	Exploitation statusNot exploited	FixYes	Affected productMicrosoft Entra ID SSO Login	Published02/04/2026	SeverityMedium

`CVE-2026-0947`AT Internet Piano Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-004	Exploitation statusNot exploited	FixYes	Affected productAT Internet Piano Analytics	Published02/04/2026	SeverityMedium

`CVE-2026-0946`AT Internet SmartTag - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-003	Exploitation statusNot exploited	FixYes	Affected productAT Internet SmartTag	Published02/04/2026	SeverityMedium

`CVE-2025-14840`HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126	Exploitation statusNot exploited	FixYes	Affected productHTTP Client Manager	Published01/28/2026	SeverityHigh

`CVE-2025-14472`Acquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-125	Exploitation statusNot exploited	FixYes	Affected productAcquia Content Hub	Published01/28/2026	SeverityHigh

`CVE-2025-13985`Entity Share - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-123	Exploitation statusNot exploited	FixYes	Affected productEntity Share	Published01/28/2026	SeverityMedium

`CVE-2025-13982`Login Time Restriction - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-120	Exploitation statusNot exploited	FixYes	Affected productLogin Time Restriction	Published01/28/2026	SeverityHigh

`CVE-2025-13981`AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119	Exploitation statusNot exploited	FixYes	Affected productAI (Artificial Intelligence)	Published01/28/2026	SeverityMedium

`CVE-2025-13980`CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118	Exploitation statusNot exploited	FixYes	Affected productCKEditor 5 Premium Features	Published01/28/2026	SeverityMedium

`CVE-2025-12761`Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116	Exploitation statusNot exploited	FixYes	Affected productSimple multi step form	Published11/18/2025	SeverityLow

`CVE-2025-9954`Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105	Exploitation statusNot exploited	FixYes	Affected productAcquia DAM	Published10/29/2025	SeverityHigh

`CVE-2025-12466`Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114	Exploitation statusNot exploited	FixYes	Affected productSimple OAuth (OAuth2) & OpenID Connect	Published10/29/2025	SeverityHigh

`CVE-2025-12083`CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113	Exploitation statusNot exploited	FixYes	Affected productCivicTheme Design System	Published10/29/2025	SeverityMedium

`CVE-2025-12082`CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112	Exploitation statusNot exploited	FixYes	Affected productCivicTheme Design System	Published10/29/2025	SeverityHigh

`CVE-2025-10927`Improper output filtering in Drupal Plausible tracking enables Cross-Site Scripting	Exploitation statusNot exploited	FixYes	Affected productPlausible tracking	Published10/29/2025	SeverityMedium

`CVE-2025-9552`Synchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102	Exploitation statusNot exploited	FixNo	Affected productSynchronize composer.json With Contrib Modules	Published10/10/2025	SeverityMedium