D
Vendor security profile5 actively exploited CVEs
drupal
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs41
Critical8
CISA KEV5
Public exploit7
Patch rate%17
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
4
0
6
17
4
0
CVE KEV
CVE severity distribution
41toplam CVE
Critical8 (20%)
High5 (12%)
Medium26 (63%)
Low1 (2%)
Uncertain1 (2%)
Patch and exploitation view
%17
Verified patch
%12
CISA KEV
%17
Public exploit
7Patch available
0Partial
3Workaround
0Vendor: no patch
31Unknown
Latest vulnerabilities
5.9
CVE-2026-76757
Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
D
Patch status unknownEPSS %0
5.9
CVE-2026-76756
Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
D
Patch status unknownEPSS %0
5.9
CVE-2026-76755
Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
D
Patch status unknownEPSS %0
7.3
CVE-2026-76782
Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102
D
Patch status unknownEPSS %0
4.2
CVE-2026-15916
Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010
D
Patch status unknownEPSS %0
4.7
CVE-2026-15917
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
D
Patch status unknownEPSS %0
5.4
CVE-2026-55805
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
D
Patch status unknownEPSS %0
6.1
CVE-2026-16638
Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080
D
Patch status unknownEPSS %0
9.8
CVE-2026-16639
Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
D
Patch status unknownEPSS %0
6.1
CVE-2026-16640
Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082
D
Patch status unknownEPSS %0