{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-108514", "tracking": { "current_release_date": "2026-10-19T16:31:31.117907Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-108514", "initial_release_date": "2026-10-15T07:14:26.630299Z", "revision_history": [ { "date": "2026-10-15T07:14:26.630299Z", "number": "1", "summary": "Products created (148).| References created (1).| Description created for source.| Unknown change.| Product Identifiers created (144)." }, { "date": "2026-10-15T07:14:43.068337Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-10-15T14:30:39.353830Z", "number": "3", "summary": "Source connected.| CVE status created. (valid)| Products connected (4).| References created (7)." }, { "date": "2026-10-15T14:30:40.715511Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-10-19T08:09:30.983305Z", "number": "5", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-10-19T16:31:05.917447Z", "number": "6", "summary": "Source connected.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-19T16:31:14.895829Z", "number": "7", "summary": "NCSC Score updated." } ], "status": "interim", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/core <10.6.19", "product": { "name": "vers:unknown/core <10.6.19", "product_id": "CSAFPID-9709100" } }, { "category": "product_version_range", "name": "vers:unknown/core <11.3.19", "product": { "name": "vers:unknown/core <11.3.19", "product_id": "CSAFPID-9709101" } }, { "category": "product_version_range", "name": "vers:unknown/core <11.4.10", "product": { "name": "vers:unknown/core <11.4.10", "product_id": "CSAFPID-9709102" } }, { "category": "product_version_range", "name": "vers:unknown/core <12.0.0-beta2", "product": { "name": "vers:unknown/core <12.0.0-beta2", "product_id": "CSAFPID-9709103" } } ], "category": "product_name", "name": "Drupal" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/10.3.0", "product": { "name": "vers:unknown/10.3.0", "product_id": "CSAFPID-4851619", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.1", "product": { "name": "vers:unknown/10.3.1", "product_id": "CSAFPID-4851622", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.10", "product": { "name": "vers:unknown/10.3.10", "product_id": "CSAFPID-4851623", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.10" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.11", "product": { "name": "vers:unknown/10.3.11", "product_id": "CSAFPID-4851624", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.11" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.12", "product": { "name": "vers:unknown/10.3.12", "product_id": "CSAFPID-4851625", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.12" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.13", "product": { "name": "vers:unknown/10.3.13", "product_id": "CSAFPID-4863767", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.13" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.14", "product": { "name": "vers:unknown/10.3.14", "product_id": "CSAFPID-5197556", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.14" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.2", "product": { "name": "vers:unknown/10.3.2", "product_id": "CSAFPID-4851626", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.3", "product": { "name": "vers:unknown/10.3.3", "product_id": "CSAFPID-4851627", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.4", "product": { "name": "vers:unknown/10.3.4", "product_id": "CSAFPID-4851628", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.5", "product": { "name": "vers:unknown/10.3.5", "product_id": "CSAFPID-4851629", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.5" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.6", "product": { "name": "vers:unknown/10.3.6", "product_id": "CSAFPID-4851630", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.6" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.7", "product": { "name": "vers:unknown/10.3.7", "product_id": "CSAFPID-4851631", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.7" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.8", "product": { "name": "vers:unknown/10.3.8", "product_id": "CSAFPID-4851632", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.8" } } }, { "category": "product_version_range", "name": "vers:unknown/10.3.9", "product": { "name": "vers:unknown/10.3.9", "product_id": "CSAFPID-4851633", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.3.9" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.0", "product": { "name": "vers:unknown/10.4.0", "product_id": "CSAFPID-4851932", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.0-beta1", "product": { "name": "vers:unknown/10.4.0-beta1", "product_id": "CSAFPID-5197557", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.0-rc1", "product": { "name": "vers:unknown/10.4.0-rc1", "product_id": "CSAFPID-5197558", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.0-rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.1", "product": { "name": "vers:unknown/10.4.1", "product_id": "CSAFPID-4851933", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.10", "product": { "name": "vers:unknown/10.4.10", "product_id": "CSAFPID-8150174", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.10" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.2", "product": { "name": "vers:unknown/10.4.2", "product_id": "CSAFPID-4851934", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.3", "product": { "name": "vers:unknown/10.4.3", "product_id": "CSAFPID-4863769", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.4", "product": { "name": "vers:unknown/10.4.4", "product_id": "CSAFPID-4863770", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.5", "product": { "name": "vers:unknown/10.4.5", "product_id": "CSAFPID-5197559", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.6", "product": { "name": "vers:unknown/10.4.6", "product_id": "CSAFPID-5197560", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.6" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.7", "product": { "name": "vers:unknown/10.4.7", "product_id": "CSAFPID-5197561", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.8", "product": { "name": "vers:unknown/10.4.8", "product_id": "CSAFPID-5197562", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/10.4.9", "product": { "name": "vers:unknown/10.4.9", "product_id": "CSAFPID-5281382", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.4.9" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.0", "product": { "name": "vers:unknown/10.5.0", "product_id": "CSAFPID-5197564", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.0-beta1", "product": { "name": "vers:unknown/10.5.0-beta1", "product_id": "CSAFPID-6058567", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.0-rc1", "product": { "name": "vers:unknown/10.5.0-rc1", "product_id": "CSAFPID-6058568", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.0-rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.1", "product": { "name": "vers:unknown/10.5.1", "product_id": "CSAFPID-5197565", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.10", "product": { "name": "vers:unknown/10.5.10", "product_id": "CSAFPID-8474853", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.10" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.11", "product": { "name": "vers:unknown/10.5.11", "product_id": "CSAFPID-8474854", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.11" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.12", "product": { "name": "vers:unknown/10.5.12", "product_id": "CSAFPID-8845901", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.12" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.2", "product": { "name": "vers:unknown/10.5.2", "product_id": "CSAFPID-5197566", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.3", "product": { "name": "vers:unknown/10.5.3", "product_id": "CSAFPID-5197567", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.3" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.4", "product": { "name": "vers:unknown/10.5.4", "product_id": "CSAFPID-5197568", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.4" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.5", "product": { "name": "vers:unknown/10.5.5", "product_id": "CSAFPID-5197569", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.5" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.6", "product": { "name": "vers:unknown/10.5.6", "product_id": "CSAFPID-5281383", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.6" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.7", "product": { "name": "vers:unknown/10.5.7", "product_id": "CSAFPID-6058569", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.7" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.8", "product": { "name": "vers:unknown/10.5.8", "product_id": "CSAFPID-6058570", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.8" } } }, { "category": "product_version_range", "name": "vers:unknown/10.5.9", "product": { "name": "vers:unknown/10.5.9", "product_id": "CSAFPID-7433738", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.5.9" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.0", "product": { "name": "vers:unknown/10.6.0", "product_id": "CSAFPID-6058571", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.0-beta1", "product": { "name": "vers:unknown/10.6.0-beta1", "product_id": "CSAFPID-8845903", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.0-rc1", "product": { "name": "vers:unknown/10.6.0-rc1", "product_id": "CSAFPID-8845904", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.0-rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.1", "product": { "name": "vers:unknown/10.6.1", "product_id": "CSAFPID-6058572", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.10", "product": { "name": "vers:unknown/10.6.10", "product_id": "CSAFPID-8474856", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.10" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.11", "product": { "name": "vers:unknown/10.6.11", "product_id": "CSAFPID-8845905", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.11" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.12", "product": { "name": "vers:unknown/10.6.12", "product_id": "CSAFPID-8845906", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.12" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.13", "product": { "name": "vers:unknown/10.6.13", "product_id": "CSAFPID-9702241", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.13" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.14", "product": { "name": "vers:unknown/10.6.14", "product_id": "CSAFPID-9702242", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.14" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.15", "product": { "name": "vers:unknown/10.6.15", "product_id": "CSAFPID-9702243", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.15" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.16", "product": { "name": "vers:unknown/10.6.16", "product_id": "CSAFPID-9702244", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.16" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.17", "product": { "name": "vers:unknown/10.6.17", "product_id": "CSAFPID-9702245", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.17" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.18", "product": { "name": "vers:unknown/10.6.18", "product_id": "CSAFPID-9702246", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.18" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.2", "product": { "name": "vers:unknown/10.6.2", "product_id": "CSAFPID-6058573", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.2" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.3", "product": { "name": "vers:unknown/10.6.3", "product_id": "CSAFPID-6058574", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.3" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.4", "product": { "name": "vers:unknown/10.6.4", "product_id": "CSAFPID-6058575", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.4" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.5", "product": { "name": "vers:unknown/10.6.5", "product_id": "CSAFPID-6058576", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.5" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.6", "product": { "name": "vers:unknown/10.6.6", "product_id": "CSAFPID-6058577", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.6" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.7", "product": { "name": "vers:unknown/10.6.7", "product_id": "CSAFPID-7433739", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.7" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.8", "product": { "name": "vers:unknown/10.6.8", "product_id": "CSAFPID-7433740", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.8" } } }, { "category": "product_version_range", "name": "vers:unknown/10.6.9", "product": { "name": "vers:unknown/10.6.9", "product_id": "CSAFPID-8474857", "product_identification_helper": { "purl": "pkg:composer/drupal/core@10.6.9" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0", "product": { "name": "vers:unknown/11.0.0", "product_id": "CSAFPID-4851936", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.1", "product": { "name": "vers:unknown/11.0.1", "product_id": "CSAFPID-4851937", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.10", "product": { "name": "vers:unknown/11.0.10", "product_id": "CSAFPID-4851938", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.10" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.11", "product": { "name": "vers:unknown/11.0.11", "product_id": "CSAFPID-4851939", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.11" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.12", "product": { "name": "vers:unknown/11.0.12", "product_id": "CSAFPID-4863772", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.12" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.13", "product": { "name": "vers:unknown/11.0.13", "product_id": "CSAFPID-5197571", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.13" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.2", "product": { "name": "vers:unknown/11.0.2", "product_id": "CSAFPID-4851940", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.3", "product": { "name": "vers:unknown/11.0.3", "product_id": "CSAFPID-4851941", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.4", "product": { "name": "vers:unknown/11.0.4", "product_id": "CSAFPID-4851942", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.4" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.5", "product": { "name": "vers:unknown/11.0.5", "product_id": "CSAFPID-4851943", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.5" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.6", "product": { "name": "vers:unknown/11.0.6", "product_id": "CSAFPID-4851944", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.6" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.7", "product": { "name": "vers:unknown/11.0.7", "product_id": "CSAFPID-4851945", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.7" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.8", "product": { "name": "vers:unknown/11.0.8", "product_id": "CSAFPID-4851946", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.8" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.9", "product": { "name": "vers:unknown/11.0.9", "product_id": "CSAFPID-4851947", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.0.9" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.0", "product": { "name": "vers:unknown/11.1.0", "product_id": "CSAFPID-4851949", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.0-beta1", "product": { "name": "vers:unknown/11.1.0-beta1", "product_id": "CSAFPID-5197572", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.0-rc1", "product": { "name": "vers:unknown/11.1.0-rc1", "product_id": "CSAFPID-5197573", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.0-rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.1", "product": { "name": "vers:unknown/11.1.1", "product_id": "CSAFPID-4851950", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.10", "product": { "name": "vers:unknown/11.1.10", "product_id": "CSAFPID-8150175", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.10" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.2", "product": { "name": "vers:unknown/11.1.2", "product_id": "CSAFPID-4851951", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.3", "product": { "name": "vers:unknown/11.1.3", "product_id": "CSAFPID-4863774", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.4", "product": { "name": "vers:unknown/11.1.4", "product_id": "CSAFPID-4863775", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.5", "product": { "name": "vers:unknown/11.1.5", "product_id": "CSAFPID-5197574", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.6", "product": { "name": "vers:unknown/11.1.6", "product_id": "CSAFPID-5197575", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.7", "product": { "name": "vers:unknown/11.1.7", "product_id": "CSAFPID-5197576", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.7" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.8", "product": { "name": "vers:unknown/11.1.8", "product_id": "CSAFPID-5197577", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.8" } } }, { "category": "product_version_range", "name": "vers:unknown/11.1.9", "product": { "name": "vers:unknown/11.1.9", "product_id": "CSAFPID-5281384", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.1.9" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.0", "product": { "name": "vers:unknown/11.2.0", "product_id": "CSAFPID-5197579", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.0-alpha1", "product": { "name": "vers:unknown/11.2.0-alpha1", "product_id": "CSAFPID-6058578", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.0-alpha1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.0-beta1", "product": { "name": "vers:unknown/11.2.0-beta1", "product_id": "CSAFPID-6058579", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.0-rc1", "product": { "name": "vers:unknown/11.2.0-rc1", "product_id": "CSAFPID-6058580", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.0-rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.0-rc2", "product": { "name": "vers:unknown/11.2.0-rc2", "product_id": "CSAFPID-6058581", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.0-rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.1", "product": { "name": "vers:unknown/11.2.1", "product_id": "CSAFPID-5197580", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.10", "product": { "name": "vers:unknown/11.2.10", "product_id": "CSAFPID-6058582", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.10" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.11", "product": { "name": "vers:unknown/11.2.11", "product_id": "CSAFPID-7433741", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.11" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.12", "product": { "name": "vers:unknown/11.2.12", "product_id": "CSAFPID-8474860", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.12" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.13", "product": { "name": "vers:unknown/11.2.13", "product_id": "CSAFPID-8474861", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.13" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.14", "product": { "name": "vers:unknown/11.2.14", "product_id": "CSAFPID-8845910", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.14" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.2", "product": { "name": "vers:unknown/11.2.2", "product_id": "CSAFPID-5197581", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.3", "product": { "name": "vers:unknown/11.2.3", "product_id": "CSAFPID-5197582", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.4", "product": { "name": "vers:unknown/11.2.4", "product_id": "CSAFPID-5197583", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.4" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.5", "product": { "name": "vers:unknown/11.2.5", "product_id": "CSAFPID-5197584", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.5" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.6", "product": { "name": "vers:unknown/11.2.6", "product_id": "CSAFPID-5197585", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.6" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.7", "product": { "name": "vers:unknown/11.2.7", "product_id": "CSAFPID-5197586", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.7" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.8", "product": { "name": "vers:unknown/11.2.8", "product_id": "CSAFPID-5281385", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.8" } } }, { "category": "product_version_range", "name": "vers:unknown/11.2.9", "product": { "name": "vers:unknown/11.2.9", "product_id": "CSAFPID-6058583", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.2.9" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.0", "product": { "name": "vers:unknown/11.3.0", "product_id": "CSAFPID-6058584", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.0-alpha1", "product": { "name": "vers:unknown/11.3.0-alpha1", "product_id": "CSAFPID-8845912", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.0-alpha1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.0-beta1", "product": { "name": "vers:unknown/11.3.0-beta1", "product_id": "CSAFPID-8845913", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.0-rc1", "product": { "name": "vers:unknown/11.3.0-rc1", "product_id": "CSAFPID-8845914", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.0-rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.0-rc2", "product": { "name": "vers:unknown/11.3.0-rc2", "product_id": "CSAFPID-8845915", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.0-rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.1", "product": { "name": "vers:unknown/11.3.1", "product_id": "CSAFPID-6058585", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.10", "product": { "name": "vers:unknown/11.3.10", "product_id": "CSAFPID-8474863", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.10" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.11", "product": { "name": "vers:unknown/11.3.11", "product_id": "CSAFPID-8474864", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.11" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.12", "product": { "name": "vers:unknown/11.3.12", "product_id": "CSAFPID-8845916", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.12" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.13", "product": { "name": "vers:unknown/11.3.13", "product_id": "CSAFPID-8845917", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.13" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.14", "product": { "name": "vers:unknown/11.3.14", "product_id": "CSAFPID-9702247", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.14" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.16", "product": { "name": "vers:unknown/11.3.16", "product_id": "CSAFPID-9702248", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.16" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.17", "product": { "name": "vers:unknown/11.3.17", "product_id": "CSAFPID-9702249", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.17" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.18", "product": { "name": "vers:unknown/11.3.18", "product_id": "CSAFPID-9702250", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.18" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.2", "product": { "name": "vers:unknown/11.3.2", "product_id": "CSAFPID-6058586", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.3", "product": { "name": "vers:unknown/11.3.3", "product_id": "CSAFPID-6058587", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.4", "product": { "name": "vers:unknown/11.3.4", "product_id": "CSAFPID-6058588", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.5", "product": { "name": "vers:unknown/11.3.5", "product_id": "CSAFPID-6058589", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.5" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.6", "product": { "name": "vers:unknown/11.3.6", "product_id": "CSAFPID-6058590", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.6" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.7", "product": { "name": "vers:unknown/11.3.7", "product_id": "CSAFPID-7433742", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.7" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.8", "product": { "name": "vers:unknown/11.3.8", "product_id": "CSAFPID-7433743", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.8" } } }, { "category": "product_version_range", "name": "vers:unknown/11.3.9", "product": { "name": "vers:unknown/11.3.9", "product_id": "CSAFPID-7433744", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.3.9" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.0", "product": { "name": "vers:unknown/11.4.0", "product_id": "CSAFPID-8845919", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.1", "product": { "name": "vers:unknown/11.4.1", "product_id": "CSAFPID-8845920", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.2", "product": { "name": "vers:unknown/11.4.2", "product_id": "CSAFPID-8845921", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.3", "product": { "name": "vers:unknown/11.4.3", "product_id": "CSAFPID-8845922", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.4", "product": { "name": "vers:unknown/11.4.4", "product_id": "CSAFPID-9702251", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.5", "product": { "name": "vers:unknown/11.4.5", "product_id": "CSAFPID-9702252", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.6", "product": { "name": "vers:unknown/11.4.6", "product_id": "CSAFPID-9702253", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.6" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.7", "product": { "name": "vers:unknown/11.4.7", "product_id": "CSAFPID-9702254", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.8", "product": { "name": "vers:unknown/11.4.8", "product_id": "CSAFPID-9702255", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/11.4.9", "product": { "name": "vers:unknown/11.4.9", "product_id": "CSAFPID-9702256", "product_identification_helper": { "purl": "pkg:composer/drupal/core@11.4.9" } } }, { "category": "product_version_range", "name": "vers:unknown/12.0.0-alpha1", "product": { "name": "vers:unknown/12.0.0-alpha1", "product_id": "CSAFPID-9702257", "product_identification_helper": { "purl": "pkg:composer/drupal/core@12.0.0-alpha1" } } }, { "category": "product_version_range", "name": "vers:unknown/12.0.0-beta1", "product": { "name": "vers:unknown/12.0.0-beta1", "product_id": "CSAFPID-9702258", "product_identification_helper": { "purl": "pkg:composer/drupal/core@12.0.0-beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/>=10.3.0|<10.6.19", "product": { "name": "vers:unknown/>=10.3.0|<10.6.19", "product_id": "CSAFPID-9704583" } }, { "category": "product_version_range", "name": "vers:unknown/>=11.0.0|<11.3.19", "product": { "name": "vers:unknown/>=11.0.0|<11.3.19", "product_id": "CSAFPID-9702261" } }, { "category": "product_version_range", "name": "vers:unknown/>=11.4.0|<11.4.10", "product": { "name": "vers:unknown/>=11.4.0|<11.4.10", "product_id": "CSAFPID-9702262" } }, { "category": "product_version_range", "name": "vers:unknown/>=12.0.0-alpha1|<12.0.0-beta2", "product": { "name": "vers:unknown/>=12.0.0-alpha1|<12.0.0-beta2", "product_id": "CSAFPID-9702263" } } ], "category": "product_name", "name": "core" } ], "category": "vendor", "name": "Drupal" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-108514", "notes": [ { "category": "description", "text": "The Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.\n\nThis vulnerability is mitigated by the fact that an attacker must have a role with permission to enter HTML tags containing specific data attributes, or the `administer menu` permission.", "title": "osvpackagist - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FDRUPAL-CORE-2026-016.json?alt=media" }, { "category": "other", "text": "5.5", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde, There is news data available from source Securityweek", "title": "NCSC Score top increasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-4851619", "CSAFPID-4851622", "CSAFPID-4851623", "CSAFPID-4851624", "CSAFPID-4851625", "CSAFPID-4863767", "CSAFPID-5197556", "CSAFPID-4851626", "CSAFPID-4851627", "CSAFPID-4851628", "CSAFPID-4851629", "CSAFPID-4851630", "CSAFPID-4851631", "CSAFPID-4851632", "CSAFPID-4851633", "CSAFPID-4851932", "CSAFPID-5197557", "CSAFPID-5197558", "CSAFPID-4851933", "CSAFPID-8150174", "CSAFPID-4851934", "CSAFPID-4863769", "CSAFPID-4863770", "CSAFPID-5197559", "CSAFPID-5197560", "CSAFPID-5197561", "CSAFPID-5197562", "CSAFPID-5281382", "CSAFPID-5197564", "CSAFPID-6058567", "CSAFPID-6058568", "CSAFPID-5197565", "CSAFPID-8474853", "CSAFPID-8474854", "CSAFPID-8845901", "CSAFPID-5197566", "CSAFPID-5197567", "CSAFPID-5197568", "CSAFPID-5197569", "CSAFPID-5281383", "CSAFPID-6058569", "CSAFPID-6058570", "CSAFPID-7433738", "CSAFPID-6058571", "CSAFPID-8845903", "CSAFPID-8845904", "CSAFPID-6058572", "CSAFPID-8474856", "CSAFPID-8845905", "CSAFPID-8845906", "CSAFPID-9702241", "CSAFPID-9702242", "CSAFPID-9702243", "CSAFPID-9702244", "CSAFPID-9702245", "CSAFPID-9702246", "CSAFPID-6058573", "CSAFPID-6058574", "CSAFPID-6058575", "CSAFPID-6058576", "CSAFPID-6058577", "CSAFPID-7433739", "CSAFPID-7433740", "CSAFPID-8474857", "CSAFPID-4851936", "CSAFPID-4851937", "CSAFPID-4851938", "CSAFPID-4851939", "CSAFPID-4863772", "CSAFPID-5197571", "CSAFPID-4851940", "CSAFPID-4851941", "CSAFPID-4851942", "CSAFPID-4851943", "CSAFPID-4851944", "CSAFPID-4851945", "CSAFPID-4851946", "CSAFPID-4851947", "CSAFPID-4851949", "CSAFPID-5197572", "CSAFPID-5197573", "CSAFPID-4851950", "CSAFPID-8150175", "CSAFPID-4851951", "CSAFPID-4863774", "CSAFPID-4863775", "CSAFPID-5197574", "CSAFPID-5197575", "CSAFPID-5197576", "CSAFPID-5197577", "CSAFPID-5281384", "CSAFPID-5197579", "CSAFPID-6058578", "CSAFPID-6058579", "CSAFPID-6058580", "CSAFPID-6058581", "CSAFPID-5197580", "CSAFPID-6058582", "CSAFPID-7433741", "CSAFPID-8474860", "CSAFPID-8474861", "CSAFPID-8845910", "CSAFPID-5197581", "CSAFPID-5197582", "CSAFPID-5197583", "CSAFPID-5197584", "CSAFPID-5197585", "CSAFPID-5197586", "CSAFPID-5281385", "CSAFPID-6058583", "CSAFPID-6058584", "CSAFPID-8845912", "CSAFPID-8845913", "CSAFPID-8845914", "CSAFPID-8845915", "CSAFPID-6058585", "CSAFPID-8474863", "CSAFPID-8474864", "CSAFPID-8845916", "CSAFPID-8845917", "CSAFPID-9702247", "CSAFPID-9702248", "CSAFPID-9702249", "CSAFPID-9702250", "CSAFPID-6058586", "CSAFPID-6058587", "CSAFPID-6058588", "CSAFPID-6058589", "CSAFPID-6058590", "CSAFPID-7433742", "CSAFPID-7433743", "CSAFPID-7433744", "CSAFPID-8845919", "CSAFPID-8845920", "CSAFPID-8845921", "CSAFPID-8845922", "CSAFPID-9702251", "CSAFPID-9702252", "CSAFPID-9702253", "CSAFPID-9702254", "CSAFPID-9702255", "CSAFPID-9702256", "CSAFPID-9702257", "CSAFPID-9702258", "CSAFPID-9704583", "CSAFPID-9702261", "CSAFPID-9702262", "CSAFPID-9702263", "CSAFPID-9709100", "CSAFPID-9709101", "CSAFPID-9709102", "CSAFPID-9709103" ] }, "references": [ { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-108514" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FDRUPAL-CORE-2026-016.json?alt=media" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3968.json" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0438" }, { "category": "external", "summary": "Source - securityweek", "url": "https://www.securityweek.com/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/" }, { "category": "external", "summary": "News - securityweek", "url": "https://www.securityweek.com/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/" }, { "category": "external", "summary": "Reference - certbundde; osv", "url": "https://www.drupal.org/sa-core-2026-016" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3968.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3968" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.drupal.org/sa-contrib-2026-218" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.drupal.org/sa-contrib-2026-219" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.drupal.org/sa-core-2026-014" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.drupal.org/sa-core-2026-015" } ], "title": "CVE-2026-108514" } ] }