Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Vulnerabilidad en productos Drupal ❗ CVE-2026-55803 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-drupal/ https://t.co/xkyCQ56Wwq
Post summary
The statement announces a new Drupal vulnerability, CVE‑2026‑55803, and directs readers to a CERT link for additional information.
『No field type shipped with Drupal core meets these criteria, and contributed or user-created field types that do appear to be extremely unusual.』 CVE-2026-55803 Drupal core - Critical - PHP object injection - SA-CORE-2026-005 https://www.drupal.org/sa-core-2026-005
Post summary
The text announces CVE-2026-55803, a critical PHP object injection flaw in Drupal core, but provides no PoC, exploit, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | drupal | drupal | - | - | - |