CVE Intelligence
Skip to main content

Vendor

drupal

On CISA KEV4Public exploit7Avg CVSS6.3

CVEs in the catalog

383

since 2017-03

Months in the top 100

29

months with a stored rank

Best rank

#7

one month recomputed

Latest rank

#24

Sep 26 report →

History

CVEs per ranked month

Last 24 of 29 ranked months. 1% of its CVEs are on the CISA KEV catalog.
Nov 19Sep 26
MonthCVEsCriticalKEVRank
Sep 26261#24
Jul 26465#15*
May 261421#54*
Mar 2625#31*
Feb 267#86*
Jan 2614#37*
Nov 257#55*
Oct 2517#33*
Aug 2561#65*
Jul 2571#66*
Jun 2521#16*
May 2516#26*
Apr 2518#25*
Mar 25303#11*
Jan 257412#7*
Dec 2483#40*
Apr 237#33*
Feb 2211#19*
Jun 212#52*
May 215#18*
Nov 2011#53*
May 201#49*
Jan 202#48*
Nov 191#100*

Affected scope

Products and weakness classes

Products

ProductCVEsShare
drupal core46
12%
core19
5%
ai artificial intelligence8
2%
open social8
2%
enterprise mfa tfa for drupal6
2%
cookies consent management4
1%
drupal4
1%
drupal canvas4
1%
two factor authentication tfa4
1%
authenticator login3
0.8%
disable login page3
0.8%
facets3
0.8%

Weakness classes

WeaknessCVEsShare
CWE-79108
28%
CWE-86335
9%
CWE-86231
8%
CWE-35228
7%
CWE-28818
5%
CWE-91514
4%
CWE-3077
2%
CWE-5026
2%

Latest CVEs

15 most recently published

Enriched records open their full page; the rest open their catalog record.
CVEWeaknessCVSSPublished
CVE-2026-16647CWE-2884.12026-09-02
CVE-2026-18986CWE-794.82026-09-02
CVE-2026-73475CWE-8639.12026-09-02
CVE-2026-73478CWE-8635.32026-09-02
CVE-2026-73474CWE-9185.32026-09-02
CVE-2026-73476CWE-1785.42026-09-02
CVE-2026-73477CWE-8635.32026-09-02
CVE-2026-76757CWE-1195.92026-09-02
CVE-2026-76756CWE-1195.92026-09-02
CVE-2026-76755CWE-1195.92026-09-02
CVE-2026-76758CWE-205.92026-09-02
CVE-2026-76782CWE-797.32026-09-02
CVE-2026-76759CWE-797.32026-09-02
CVE-2026-81167CWE-794.82026-09-02
CVE-2026-81165CWE-8635.32026-09-02