目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Drupal 厂商漏洞列表 / CVE 中文分析 398

Drupal 厂商相关 398 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Drupal 是广泛使用的开源内容管理系统，核心用于构建网站与数字体验。其历史漏洞多涉及远程代码执行、跨站脚本及权限绕过，常因配置不当或插件缺陷引发。尽管具备完善的安全更新机制，但累计 295 条 CVE 显示其攻击面较大。用户需及时修补并强化访问控制，以应对持续演变的安全威胁，确保系统稳定运行。

Top products by Drupal: Drupal Core core Open Social AI (Artificial Intelligence) Enterprise MFA - TFA for Drupal Drupal Canvas COOKiES Consent Management Two-factor Authentication (TFA) Tagify Disable Login Page Facets Gammu SMS Daemon One Time Password Monster Menus OpenID Connect / OAuth client Authenticator Login Login Disable Colorbox Paragraphs table Diff POST File Acquia DAM AI Agents Paragraphs Advanced Content Feedback (aka admin_feedback) Google Tag SAML SSO - Service Provider Quick Node Block Simple Klaro Klaro Cookie & Consent Management
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-5343 Drupal SAML SSO - Service Provider 安全漏洞 — SAML SSO - Service Provider CWE-754 - - 2026-05-28
CVE-2026-4093 Drupal 跨站脚本漏洞 — Term Reference Tree CWE-79 - - 2026-05-21
CVE-2026-4929 Drupal 安全漏洞 — Simple Hierarchical Select (shs) - - 2026-05-21
CVE-2026-9082 Drupal core SQL注入漏洞 — Drupal core CWE-89 9.8 Critical 2026-05-20
CVE-2026-8495 Drupal Date iCal 安全漏洞 — Date iCal CWE-862 - - 2026-05-19
CVE-2026-8493 Drupal Colorbox Inline 跨站脚本漏洞 — Colorbox Inline CWE-79 - - 2026-05-19
CVE-2026-8492 Drupal Translate Drupal with GTranslate 安全漏洞 — Translate Drupal with GTranslate CWE-471 - - 2026-05-19
CVE-2026-8491 Drupal Node View Permissions 代码问题漏洞 — Node View Permissions CWE-754 - - 2026-05-19
CVE-2026-6871 Drupal Obfuscate 跨站脚本漏洞 — Obfuscate CWE-79 - - 2026-05-19
CVE-2026-6367 Drupal core 跨站脚本漏洞 — Drupal core CWE-79 - - 2026-05-19
CVE-2026-6366 Drupal core 安全漏洞 — Drupal core CWE-915 - - 2026-05-19
CVE-2026-6365 Drupal core 跨站脚本漏洞 — Drupal core CWE-79 - - 2026-05-19
CVE-2026-6095 Drupal Orejime 跨站脚本漏洞 — Orejime CWE-79 - - 2026-05-19
CVE-2026-0748 Drupal Internationalization module 安全漏洞 — Internationalization (i18n) - i18n_node submodule CWE-284 4.3 - 2026-03-26
CVE-2026-1556 Drupal File Field Paths 安全漏洞 — Drupal File (Field) Paths CWE-200 6.5 - 2026-03-26
CVE-2026-4393 Drupal Automated Logout 安全漏洞 — Automated Logout CWE-352 8.1AI High AI 2026-03-26
CVE-2026-4933 Drupal Unpublished Node Permissions 安全漏洞 — Unpublished Node Permissions CWE-863 7.5 - 2026-03-26
CVE-2026-3573 Drupal AI 安全漏洞 — AI (Artificial Intelligence) CWE-863 9.1 - 2026-03-26
CVE-2026-3532 Drupal OpenID Connect / OAuth client 安全漏洞 — OpenID Connect / OAuth client CWE-178 8.8AI High AI 2026-03-26
CVE-2026-3531 Drupal OpenID Connect / OAuth client 安全漏洞 — OpenID Connect / OAuth client CWE-288 9.8AI Critical AI 2026-03-26
CVE-2026-3530 Drupal OpenID Connect / OAuth client 安全漏洞 — OpenID Connect / OAuth client CWE-918 9.8AI Critical AI 2026-03-26
CVE-2026-3529 Drupal Google Analytics GA4 安全漏洞 — Google Analytics GA4 CWE-79 6.1AI Medium AI 2026-03-26
CVE-2026-3528 Drupal Calculation Fields 安全漏洞 — Calculation Fields CWE-79 6.1AI Medium AI 2026-03-26
CVE-2026-3527 Drupal AJAX Dashboard 安全漏洞 — AJAX Dashboard CWE-306 9.1AI Critical AI 2026-03-26
CVE-2026-3526 Drupal File Access Fix 安全漏洞 — File Access Fix (deprecated) CWE-863 7.5AI High AI 2026-03-26
CVE-2026-3525 Drupal File Access Fix 安全漏洞 — File Access Fix (deprecated) CWE-863 7.5AI High AI 2026-03-26
CVE-2026-3218 Drupal Responsive Favicons 安全漏洞 — Responsive Favicons CWE-79 6.1 - 2026-03-25
CVE-2026-3217 Drupal SAML SSO 安全漏洞 — SAML SSO - Service Provider CWE-79 6.1 - 2026-03-25
CVE-2026-3216 Drupal Canvas 安全漏洞 — Drupal Canvas CWE-918 9.8 - 2026-03-25
CVE-2026-3215 Drupal Islandora 安全漏洞 — Islandora CWE-79 6.1 - 2026-03-25

本页汇总了 Drupal 厂商截至目前公开的全部 398 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。