2 CVEs

Drupal Single Content Sync Injection Flaws

2026-10-30

PHP

Path Traversal

Drupal

Single Content Sync

Deserialization

Code Injection

CVE-2026-118561 PATCH

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

0.1%

EPSS

CVE-2026-118562 PATCH

Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

0.3%

EPSS