CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[NEW] [medium] Drupal Extensions: Multiple vulnerabilities

mediumCVE-2026-58587CVE-2026-58588CVE-2026-58589CVE-2026-58590CVE-2026-58591
A remote, authenticated attacker can exploit multiple vulnerabilities in Drupal to conduct a cross-site scripting attack, bypass security measures, and manipulate data.

CSIRTS triage

vendor: Drupalproduct: ExtensionsCross-site scriptingAuthentication bypass
What
Multiple vulnerabilities could allow a remote, authenticated attacker to exploit the system.
Who is affected
Users of Drupal Extensions.
Urgency
The urgency is medium, as the vulnerabilities could lead to significant security issues.
Action
Review the vendor advisory and apply necessary updates.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Extensions

Get an email when a new Extensions advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-07-02
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2181

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-58587coverage & exploitation statusNVD · CVE.org
CVE-2026-58588coverage & exploitation statusNVD · CVE.org
CVE-2026-58589coverage & exploitation statusNVD · CVE.org
CVE-2026-58590coverage & exploitation statusNVD · CVE.org
CVE-2026-58591coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from CERT-Bund (BSI) Security Advisories