CVE Intelligence

Drupal Cloud vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal Cloud: 2 record(s), with affected versions and fixes.

CVE-2026-96376 Medium · 6.4 CWE-78 Oct 21, 2026
Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177
Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1.
CVE-2026-96375 Medium · 4.8 CWE-295 Oct 21, 2026
Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.