Advisories · Technology

Drupal Islandora.

Every CVE that names Drupal Islandora among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84916 CVE record

CVSS 3.7 Low

Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126
- Drupal Islandora
- Broken access control
Not analysed yet 22 Oct 2026
CVE-2026-3215 CVE record

CVSS 5.4 Medium

Islandora - Moderately critical - Arbitrary file upload, Cross-site scripting - SA-CONTRIB-2026-016
- Drupal Islandora
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026