Advisories · Technology

Drupal AI (Artificial Intelligence).

Every CVE that names Drupal AI (Artificial Intelligence) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118545 CVE record

CVSS 6.5 Medium

AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-118546 CVE record

CVSS 6.5 Medium

AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-118548 CVE record

CVSS 3.7 Low

AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268
- Drupal AI (Artificial Intelligence)
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-118549 CVE record

CVSS 7.1 High

AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-118550 CVE record

CVSS 5.9 Medium

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270
- Drupal AI (Artificial Intelligence)
- CWE-525
Not analysed yet 30 Oct 2026
CVE-2026-118551 CVE record

CVSS 3.1 Low

AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271
- Drupal AI (Artificial Intelligence)
- Information disclosure
Not analysed yet 30 Oct 2026
CVE-2026-118552 CVE record

CVSS 6.5 Medium

AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-118553 CVE record

CVSS 5.5 Medium

AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-84911 CVE record

CVSS 3.1 Low

AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2026
CVE-2026-84912 CVE record

CVSS 4.6 Medium

AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
- Drupal AI (Artificial Intelligence)
- Broken access control
Not analysed yet 22 Oct 2026
CVE-2026-13235 CVE record

CVSS 3.3 Low

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055
- Drupal AI (Artificial Intelligence)
- Broken access control
Not analysed yet 10 Jul 2026
CVE-2026-13234 CVE record

CVSS 6.1 Medium

AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2026
CVE-2026-3573 CVE record

CVSS 7.5 High

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028
- Drupal AI (Artificial Intelligence)
- Broken access control
Not analysed yet 26 Mar 2026
CVE-2025-13981 CVE record

CVSS 4.4 Medium

AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119
- Drupal AI (Artificial Intelligence)
- Cross-site scripting (XSS)
Not analysed yet 28 Jan 2026