Drupal CVEs
Every Drupal vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
2 CVEs
EPSSCoverage
8.1CVSS 3.1
CVE-2026-108097
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
Drupal · core
EPSS
0.57%
2 stories
2 weeks ago
8.1CVSS 3.1
CVE-2026-108099
Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218
Drupal · Entity List
EPSS
0.41%
2 stories
2 weeks ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.