2026-10-21

2026-10-22

2026-10-23

All (455) Critical (63) High (142) Medium (190) Low (50)

CVE-2026-96363 Oct 22, 01:21 PATCH Monitor

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

PHP XSS Privilege Escalation Drupal Webform

NVD VulDB

EPSS

0.2%

CVE-2026-96379 Oct 22, 01:21 PATCH This Week

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.

PHP XSS Drupal Cookiecuttr

NVD

EPSS

0.1%

CVE-2026-96391 Oct 22, 01:21 PATCH This Week

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.

PHP Authentication Bypass Information Disclosure Drupal Webform Rest

NVD

EPSS

0.2%

CVE-2026-51954 Oct 22, 00:00 Awaiting Data

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.

RCE N A

NVD GitHub VulDB

EPSS

0.5%

CVE-2026-107079 Oct 22, 00:00 Awaiting Data

An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component

Denial Of Service N A

NVD GitHub

EPSS

0.2%

Prev Page 10 of 10