DR
CMS
Drupal
by Drupal · last CVE Oct 22, 2026
On CISA KEVExploited in the wildRansomware-linked
680
CVEs
8
On KEV
9.8
Max CVSS
72
New 30D
Severity mix
Critical 44High 108Medium 347Low 1
Watch

Add Drupal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16648
3.8
0%
Oct 22
Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128
Affected: 0.0.0 before 1.2.7
Showing 1
The 500 most important CVEs for this product (exploited first, then by severity)