CVE-2026-55808Patch(drupal / drupal)
LOWCVSS 5.4 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Patch drupal drupal systems immediately
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
0.5/ 10 priority
Sources & remediation
Vendor / third-party advisories
Weakness type (CWE)
CWE-79
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- drupal
Threat summary
- Patch or workaround signal is available
- 1 mentions across 1 observed day
What's happening
- Patch or workaround mentioned in 1 signal
- Technical details provided in 1 signal
- 1 total mentions across 1 day
Affected systems
Vendors
Products
drupal
Deep dive
Activity timeline1 mentions / 1d
Signal classification1 categories
Patch1100.0%
Referenced assets1 URL
By indicator
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | drupal | drupal | - | - | - |