D
Drupal
Security Risk Profile
39
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 1, 2009 to present
1000
Total CVEs
238
Critical+High
12
Exploited
83
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
83
Critical/High
Risk Level
39/100
low
⚠️ 12 Active Exploits🆕 3Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
111High
127Medium
528Low
192Exploit Likelihood
>50% chance
120-50%
05-20%
0<5%
89Age Distribution
Common Weaknesses (CWE)
1
XSS
396
2
CSRF
75
3
Infoleak
32
4
Input Validation
30
5
SQL Injection
23
Most Affected Products
1. Drupal Drupal5292
2. Ubercart Ubercart478
3. composer/drupal/core260
4. SpeedTech Storm222
5. Nathan Haug Webform196
Recent Vulnerabilities
See more →SA-CORE-2026-014
CVSS 9.0critical
Oct 14, 2026
SA-CORE-2026-016
CVSS 9.0critical
Oct 14, 2026
SA-CORE-2026-015
CVSS 9.0critical
Oct 14, 2026
SA-CORE-2026-013
CVSS 9.0critical
Sep 16, 2026
https://reddit.com/r/cybersecurity/comments/1wcotyg/writeup_cve202687936_a_critical_sqli_in_a_drupal/
unknown
Write-up: CVE-2026-87936, a critical SQLi in a Drupal AI module
Sep 10, 2026🔧 No Patch
CVE-2026-73478
CVSS 5.3medium
Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096
Sep 2, 2026🔧 No Patch
CVE-2026-76782
CVSS 7.3high
Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102
Sep 2, 2026🔧 No Patch
CVE-2026-81167
CVSS 4.8medium
Address Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103
Sep 2, 2026🔧 No Patch
CVE-2026-81165
CVSS 5.3medium
Blazy - Less critical - Access bypass - SA-CONTRIB-2026-104
Sep 2, 2026🔧 No Patch
CVE-2026-81168
CVSS 3.7low
CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105
Sep 2, 2026🔧 No Patch
Monitor Drupal in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.