CVE-2026-96392: AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187

Q: Which installations are affected?

Drupal AI CKEditor installations running versions from 0.0.0 through 1.4.3 are affected.

Q: What type of impact can successful exploitation have?

The vulnerability allows code injection through Twig templates, which can lead to code execution.

Published Oct 22, 2026

Updated

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.

Affected Software

1 affected component

Drupal AI CKEditor>=0.0.0<=1.4.3

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Drupal AI CKEditor installations running versions from 0.0.0 through 1.4.3 are affected.

What type of impact can successful exploitation have?

The vulnerability allows code injection through Twig templates, which can lead to code execution.

CVE-2026-96392: AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What type of impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What type of impact can successful exploitation have?