Baza CVE

Wszystkie technologie

Szukaj CVE lub produktu Publikacja CVEKolejność

Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
Oprogramowanie	Podatność i krótki opis
SAML SSO - Service Provider	CVE-2026-87949 Pozostałe Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.	3,3	0,21 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
SAML SSO - Service Provider	CVE-2026-87950 Pozostałe Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.	5,3	0,29 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
SAML SSO - Service Provider	CVE-2026-87951 Pozostałe Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.	3,8	0,25 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
SAML SSO - Service Provider	CVE-2026-87952 Pozostałe Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.	3,1	0,22 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
amazee.ai Private AI Provider	CVE-2026-87936 Pozostałe Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.	6,5	0,27 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Central Authentication System (CAS) Server	CVE-2026-87937 Pozostałe URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.	6,5	0,28 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
CSP log	CVE-2026-87938 Pozostałe Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.	6,5	0,36 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Feed Block	CVE-2026-87939 Pozostałe Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2.	4,2	0,2 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Key auth	CVE-2026-87940 Pozostałe Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.	5,4	0,23 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Patreon	CVE-2026-87941 Pozostałe Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.	5,9	0,31 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
SafeDelete	CVE-2026-87942 Pozostałe Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88.	4,6	0,21 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
SAML SSO - Service Provider	CVE-2026-87943 Pozostałe Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.	6,5	0,25 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
SAML SSO - Service Provider	CVE-2026-87944 Pozostałe Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.	4,8	0,14 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Islandora	CVE-2026-84916 Pozostałe Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.	3,7	0,25 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Jsonapi Role Access	CVE-2026-84917 Pozostałe Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.	6,5	0,25 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Monobank payment API	CVE-2026-84918 Pozostałe Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3.	3,7	0,16 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
PhotoSwipe - Responsive JavaScript Modal Image Gallery	CVE-2026-84919 Pozostałe Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.	4,6	0,21 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Unpublished Node Permissions	CVE-2026-84920 Pozostałe Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0.	5,3	0,29 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Webform Submissions Delete	CVE-2026-84921 Pozostałe Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.	5,3	0,37 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Email Verification / SMS Verification / OTP Verification	CVE-2026-84923 Pozostałe Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.	6,5	0,31 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Email Verification / SMS Verification / OTP Verification	CVE-2026-84924 Pozostałe Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.	5,4	0,23 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Mailer Plus Log	CVE-2026-16648 Pozostałe Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versions: from 0.0.0 to 1.2.7.	3,8	0,25 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Media Library Importer	CVE-2026-81163 Pozostałe Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.	5,4	0,27 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Advanced Search	CVE-2026-84910 Pozostałe Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.	4,2	0,19 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków
AI (Artificial Intelligence)	CVE-2026-84911 Pozostałe Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.	3,1	0,19 %14 lis 2026	Brak wpisu w KEV nie wyklucza ataków

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone15.11.2026, 16:07 UTC

NVD · aktualizacjeOstatnie przetworzenie zakończone15.11.2026, 16:07 UTC

CISA KEVOstatnie przetworzenie zakończone15.11.2026, 17:15 UTC

FIRST EPSSOpóźnione lub nieustalone14.11.2026, 15:31 UTCData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.