Vendor
Critical Access Bypass Vulnerability in Drupal Internationalization Single Sign-On Module
1 TTPA critical access bypass vulnerability (SA-CONTRIB-2026-081) exists in the Internationalization Single Sign-On module for Drupal, affecting versions prior to 1.8.0, allowing an attacker to bypass authentication mechanisms and potentially gain unauthorized access or elevate privileges within the application.
Drupal OpenAI Provider Module Vulnerable to Server-Side Request Forgery and Local File Read (CVE-2026-13233)
2 rules 3 TTPs 1 CVE 5 IOCsA moderately critical Server-Side Request Forgery (SSRF) vulnerability, CVE-2026-13233, in the Drupal OpenAI Provider (`ai_provider_openai`) module allows attackers to achieve local file reads or access internal network services by manipulating the upstream AI API response, with a public exploit now available.
Multiple Vulnerabilities Discovered in Drupal Leading to XSS and Data Confidentiality Breach
3 TTPsMultiple vulnerabilities have been discovered in Drupal, allowing an attacker to achieve indirect remote code injection via Cross-Site Scripting (XSS) and compromise data confidentiality across various versions.
Drupal Core: Multiple Vulnerabilities Allowing Information Disclosure and XSS
2 TTPsA remote, unauthenticated attacker can exploit multiple vulnerabilities in Drupal Core to achieve information disclosure and Cross-Site Scripting (XSS) attacks, potentially compromising user data or session integrity.
Drupal AlternativeCommerce (Basket) Module Vulnerability Allows Code Execution
2 TTPsA critical vulnerability in the Drupal 'AlternativeCommerce' (Basket) module allows a remote, unauthenticated attacker to execute arbitrary program code. This can lead to full compromise of the affected web application.
Critical SQL Injection Vulnerability in Drupal Location Selector Module (SA-CONTRIB-2026-072)
1 rule 3 TTPsA critical SQL Injection vulnerability (SA-CONTRIB-2026-072) has been identified in Drupal's Location Selector module, affecting versions prior to 1.3.0, allowing unauthenticated attackers to execute arbitrary SQL commands and potentially leading to unauthorized data access, modification, or deletion.
Drupal Security Advisory AV26-615: Multiple Critical Vulnerabilities
3 rules 7 TTPsOn June 17, 2026, Drupal released critical security advisories (AV26-615) addressing multiple vulnerabilities in Drupal core and several modules including Plotly.js Graphing, Flag attendance field, and Formatter Field, which, if unpatched, could allow remote attackers to compromise affected web servers and sensitive data.
Drupal Core PostgreSQL SQL Injection Vulnerability (CVE-2026-9082) Exploit Available
2 rules 1 TTP 1 CVE 2 IOCsA public exploit is available for CVE-2026-9082, a SQL injection vulnerability in Drupal Core affecting PostgreSQL-backed sites running versions 8.0 through 11.3.9, allowing unauthenticated users to potentially achieve data exfiltration, privilege escalation, and remote code execution.
Drupal Date iCal Module Vulnerability Allows Information Disclosure
2 rules 1 TTPA critical information disclosure vulnerability exists in the Drupal Date iCal module versions prior to 4.0.15, potentially allowing unauthorized access to sensitive information.
webonyx/graphql-php Unbounded Recursion Vulnerability
2 rules 1 TTPThe webonyx/graphql-php library has an unbounded recursion vulnerability in its parser that can lead to a stack overflow, causing a denial of service by terminating the PHP process with a SIGSEGV.