CVE-2026-55806: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, fro

unknownCVE-2026-55806

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: unknown
Published: 2026-07-10
Last updated: 2026-07-10
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-55806

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-55806	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownDrupal Multiple Vulnerabilitieshkcert
criticalDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007drupal

Recent advisories for URL Redirection to

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

criticalGHSA-h29v-hj44-q8cv: Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-contro…ghsa · 2026-07-10
mediumGHSA-h5g6-xmh4-hc37: OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirectghsa · 2026-07-09
unknownCVE-2026-54004: Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites with …nvd · 2026-07-09
highCVE-2026-59806: Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability t…nvd · 2026-07-08
criticalCVE-2026-41106: Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized att…nvd · 2026-07-02
unknownCVE-2026-58520: URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation …nvd · 2026-07-01

CVE-2026-55806: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, fro

Details

Referenced CVEs

Same CVEs, other sources

Recent advisories for URL Redirection to

More from NVD Recent CVEs