CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/11/2026 |
| CVE-2026-122074 | This module enables you to reset passwords via one time passcode to email or SMS rather than reset password links. | 04/11/2026 |
| CVE-2026-122073 | The Name Field module provides a field for storing a personal name as separate components. | 04/11/2026 |
| CVE-2026-122072 | This module allows forums to be set private and to be given moderators. | 04/11/2026 |
| CVE-2026-122071 | This module enables you to accept payments through Escrow.com with Drupal Commerce. | 04/11/2026 |
| CVE-2026-122070 | This module lets customers replace an item in their cart with one of the alternative product variations listed for it. | 04/11/2026 |
| CVE-2026-122069 | The AlternativeCommerce PayPal Checkout module provides an AlternativeCommerce method to embed payment services from PayPal. | 04/11/2026 |
| CVE-2026-122068 | This module enables you to add syntax-highlighted code snippets to content using CKEditor 5. | 04/11/2026 |
| CVE-2026-122067 | The REST & JSON API Authentication module provides API authentication for Drupal sites. | 04/11/2026 |
| CVE-2026-122066 | This module enables you to send messages ("Notifications") to users upon a certain Workflow state change. | 04/11/2026 |
| CVE-2026-122058 | This module introduces an OAuth 2.0 authorization server, which can be configured to protect your Drupal instance with access tokens, or allow clients to request new access tokens and refresh them. | 04/11/2026 |
| CVE-2026-122057 | This module enables you to upload files from the browser directly to Amazon S3 and register them as Drupal files, bypassing normal PHP file size and timeout limits. | 04/11/2026 |
| CVE-2026-118566 | The Content Synchronizer module allows content to be exported and imported between Drupal sites via uploaded archive files. | 04/11/2026 |
| CVE-2026-118547 | The Content Synchronizer module allows content to be exported and imported between Drupal sites via uploaded archive files. | 04/11/2026 |
| CVE-2026-76506 | ALTO7.6 | A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.
This vulnerability is due to insufficient validation of user-supplied input in an HTTP re | 04/11/2026 |
| CVE-2026-76419 | MÉDIO6.1 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
| 04/11/2026 |