Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

drupal core — Vulnerabilities & Security Advisories 58

All 58 CVE vulnerabilities found in drupal core, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting Drupal Core, a widely used open-source content management system. It collects reported security flaws and published advisories for the product, spanning the historical timeline of its release lifecycle. Users can track vendor security notices, analyze specific weakness categories such as cross-site scripting or remote code execution, and review the complete vulnerability history associated with Drupal Core. The data helps teams evaluate risk exposure, plan patching schedules, and identify recurring patterns in the product's security posture over time.

Vendor: drupal core

CVE ID Title CVSS Severity Published
CVE-2026-15916 Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010 CWE-862 - - 2026-08-25
CVE-2026-15917 Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 CWE-79 - - 2026-08-25
CVE-2026-55805 Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012 CWE-79 - - 2026-08-25
CVE-2026-55808 Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009 CWE-79 - - 2026-07-10
CVE-2026-55807 Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008 CWE-918 - - 2026-07-10
CVE-2026-55806 Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007 CWE-601 - - 2026-07-10
CVE-2026-55804 Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006 CWE-915 - - 2026-07-10
CVE-2026-55803 Drupal core - Critical - PHP object injection - SA-CORE-2026-005 CWE-915 - - 2026-07-10
CVE-2026-9082 Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 CWE-89 9.8 Critical 2026-05-20
CVE-2026-6367 Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 CWE-79 - - 2026-05-19
CVE-2026-6366 Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002 CWE-915 - - 2026-05-19
CVE-2026-6365 Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 CWE-79 - - 2026-05-19
CVE-2025-13083 Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 CWE-525 7.5AI High AI 2025-11-18
CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007 CWE-451 4.3AI Medium AI 2025-11-18
CVE-2025-13081 Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006 CWE-915 9.8AI Critical AI 2025-11-18
CVE-2025-13080 Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 CWE-754 - - AI 2025-11-18
CVE-2025-31675 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 CWE-79 6.1 - 2025-03-31
CVE-2025-31674 Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003 CWE-915 9.8 - 2025-03-31
CVE-2025-31673 Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002 CWE-863 6.5 - 2025-03-31
CVE-2025-3057 Drupal core - Critical - Cross site scripting - SA-CORE-2025-001 CWE-79 6.1 - 2025-03-31
CVE-2024-55638 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008 CWE-915 9.8 - 2024-12-09
CVE-2024-55637 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007 CWE-915 9.8 - 2024-12-09
CVE-2024-55636 Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 CWE-915 9.8 - 2024-12-09
CVE-2024-55635 Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 CWE-79 6.1 - 2024-12-09
CVE-2024-55634 Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 CWE-178 8.8 - 2024-12-09
CVE-2024-12393 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 CWE-79 6.1 - 2024-12-09
CVE-2024-11942 Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 CWE-390 9.1 - 2024-12-05
CVE-2024-11941 Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001 CWE-835 7.5 - 2024-12-05
CVE-2024-45440 Drupal 安全漏洞 5.3AI Medium AI 2024-08-29
CVE-2020-13688 Drupal Core 跨站脚本漏洞 6.1 - 2021-06-11

All 58 known CVE vulnerabilities affecting drupal core with full Chinese analysis, references, and POCs where available.