{
  "document" : {
    "aggregate_severity" : {
      "text" : "kritisch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Drupal ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3819 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3819.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3819 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3819"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-192 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-192"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-193 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-193"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-194 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-194"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-195 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-195"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-196 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-196"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-197 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-197"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-198 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-198"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-199 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-199"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-200 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-200"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-201 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-201"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-202 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-202"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-203 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-203"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-204 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-204"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-205 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-205"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-206 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-206"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-207 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-207"
    }, {
      "category" : "external",
      "summary" : "Exploit CVE-2026-107268 vom 2026-10-07",
      "url" : "https://github.com/yuwkaaa/CVE-2026-107268"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-208 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-208"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-209 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-209"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-210 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-210"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-211 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-211"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-212 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-212"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-213 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-213"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-214 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-214"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-215 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-215"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-216 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-216"
    }, {
      "category" : "external",
      "summary" : "Drupal Security Advisory sa-contrib-2026-217 vom 2026-10-07",
      "url" : "https://www.drupal.org/sa-contrib-2026-217"
    } ],
    "source_lang" : "en-US",
    "title" : "Drupal Erweiterungen: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-08T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-09T12:04:13.823+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3819",
      "initial_release_date" : "2026-10-08T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-08T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "Block AJAX <3.0.2",
          "product" : {
            "name" : "Open Source Drupal Block AJAX <3.0.2",
            "product_id" : "T060868"
          }
        }, {
          "category" : "product_version",
          "name" : "Block AJAX 3.0.2",
          "product" : {
            "name" : "Open Source Drupal Block AJAX 3.0.2",
            "product_id" : "T060868-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:block_ajax__3.0.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Entity Reference Manager (Merge entities) <1.0.3",
          "product" : {
            "name" : "Open Source Drupal Entity Reference Manager (Merge entities) <1.0.3",
            "product_id" : "T060869"
          }
        }, {
          "category" : "product_version",
          "name" : "Entity Reference Manager (Merge entities) 1.0.3",
          "product" : {
            "name" : "Open Source Drupal Entity Reference Manager (Merge entities) 1.0.3",
            "product_id" : "T060869-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:entity_reference_manager_%2528merge_entities%2529__1.0.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "MathJax: LaTeX <4.1.2",
          "product" : {
            "name" : "Open Source Drupal MathJax: LaTeX <4.1.2",
            "product_id" : "T060870"
          }
        }, {
          "category" : "product_version",
          "name" : "MathJax: LaTeX 4.1.2",
          "product" : {
            "name" : "Open Source Drupal MathJax: LaTeX 4.1.2",
            "product_id" : "T060870-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:mathjax_latex__4.1.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Authenticator Login Plus (2FA) <1.0.1",
          "product" : {
            "name" : "Open Source Drupal Authenticator Login Plus (2FA) <1.0.1",
            "product_id" : "T060871"
          }
        }, {
          "category" : "product_version",
          "name" : "Authenticator Login Plus (2FA) 1.0.1",
          "product" : {
            "name" : "Open Source Drupal Authenticator Login Plus (2FA) 1.0.1",
            "product_id" : "T060871-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:authenticator_login_plus_%25282fa%2529__1.0.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Actstream <2.0.1",
          "product" : {
            "name" : "Open Source Drupal Actstream <2.0.1",
            "product_id" : "T060872"
          }
        }, {
          "category" : "product_version",
          "name" : "Actstream 2.0.1",
          "product" : {
            "name" : "Open Source Drupal Actstream 2.0.1",
            "product_id" : "T060872-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:actstream__2.0.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Actstream <2.1.1",
          "product" : {
            "name" : "Open Source Drupal Actstream <2.1.1",
            "product_id" : "T060873"
          }
        }, {
          "category" : "product_version",
          "name" : "Actstream 2.1.1",
          "product" : {
            "name" : "Open Source Drupal Actstream 2.1.1",
            "product_id" : "T060873-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:actstream__2.1.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Inline Entity Form Dialog <1.0.6",
          "product" : {
            "name" : "Open Source Drupal Inline Entity Form Dialog <1.0.6",
            "product_id" : "T060874"
          }
        }, {
          "category" : "product_version",
          "name" : "Inline Entity Form Dialog 1.0.6",
          "product" : {
            "name" : "Open Source Drupal Inline Entity Form Dialog 1.0.6",
            "product_id" : "T060874-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:inline_entity_form_dialog__1.0.6"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Linked Field <1.8.0",
          "product" : {
            "name" : "Open Source Drupal Linked Field <1.8.0",
            "product_id" : "T060875"
          }
        }, {
          "category" : "product_version",
          "name" : "Linked Field 1.8.0",
          "product" : {
            "name" : "Open Source Drupal Linked Field 1.8.0",
            "product_id" : "T060875-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:linked_field__1.8.0"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Gutenberg <2.15.0",
          "product" : {
            "name" : "Open Source Drupal Gutenberg <2.15.0",
            "product_id" : "T060876"
          }
        }, {
          "category" : "product_version",
          "name" : "Gutenberg 2.15.0",
          "product" : {
            "name" : "Open Source Drupal Gutenberg 2.15.0",
            "product_id" : "T060876-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:gutenberg__2.15.0"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Gutenberg <3.0.7",
          "product" : {
            "name" : "Open Source Drupal Gutenberg <3.0.7",
            "product_id" : "T060877"
          }
        }, {
          "category" : "product_version",
          "name" : "Gutenberg 3.0.7",
          "product" : {
            "name" : "Open Source Drupal Gutenberg 3.0.7",
            "product_id" : "T060877-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:gutenberg__3.0.7"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Inline Formatter Field <4.2.0",
          "product" : {
            "name" : "Open Source Drupal Inline Formatter Field <4.2.0",
            "product_id" : "T060878"
          }
        }, {
          "category" : "product_version",
          "name" : "Inline Formatter Field 4.2.0",
          "product" : {
            "name" : "Open Source Drupal Inline Formatter Field 4.2.0",
            "product_id" : "T060878-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:inline_formatter_field__4.2.0"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Leaflet <10.4.13",
          "product" : {
            "name" : "Open Source Drupal Leaflet <10.4.13",
            "product_id" : "T060879"
          }
        }, {
          "category" : "product_version",
          "name" : "Leaflet 10.4.13",
          "product" : {
            "name" : "Open Source Drupal Leaflet 10.4.13",
            "product_id" : "T060879-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:leaflet__10.4.13"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Views Share <2.0.1",
          "product" : {
            "name" : "Open Source Drupal Views Share <2.0.1",
            "product_id" : "T060880"
          }
        }, {
          "category" : "product_version",
          "name" : "Views Share 2.0.1",
          "product" : {
            "name" : "Open Source Drupal Views Share 2.0.1",
            "product_id" : "T060880-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:views_share__2.0.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Xray Audit <3.1.1",
          "product" : {
            "name" : "Open Source Drupal Xray Audit <3.1.1",
            "product_id" : "T060881"
          }
        }, {
          "category" : "product_version",
          "name" : "Xray Audit 3.1.1",
          "product" : {
            "name" : "Open Source Drupal Xray Audit 3.1.1",
            "product_id" : "T060881-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:xray_audit__3.1.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Xray Audit <2.0.4",
          "product" : {
            "name" : "Open Source Drupal Xray Audit <2.0.4",
            "product_id" : "T060882"
          }
        }, {
          "category" : "product_version",
          "name" : "Xray Audit 2.0.4",
          "product" : {
            "name" : "Open Source Drupal Xray Audit 2.0.4",
            "product_id" : "T060882-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:xray_audit__2.0.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Xray Audit <1.6.3",
          "product" : {
            "name" : "Open Source Drupal Xray Audit <1.6.3",
            "product_id" : "T060883"
          }
        }, {
          "category" : "product_version",
          "name" : "Xray Audit 1.6.3",
          "product" : {
            "name" : "Open Source Drupal Xray Audit 1.6.3",
            "product_id" : "T060883-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:xray_audit__1.6.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "DKAN <4.0.4",
          "product" : {
            "name" : "Open Source Drupal DKAN <4.0.4",
            "product_id" : "T060884"
          }
        }, {
          "category" : "product_version",
          "name" : "DKAN 4.0.4",
          "product" : {
            "name" : "Open Source Drupal DKAN 4.0.4",
            "product_id" : "T060884-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:dkan__4.0.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "DKAN <4.1.5",
          "product" : {
            "name" : "Open Source Drupal DKAN <4.1.5",
            "product_id" : "T060885"
          }
        }, {
          "category" : "product_version",
          "name" : "DKAN 4.1.5",
          "product" : {
            "name" : "Open Source Drupal DKAN 4.1.5",
            "product_id" : "T060885-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:dkan__4.1.5"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Menu Link Attributes <1.8.0",
          "product" : {
            "name" : "Open Source Drupal Menu Link Attributes <1.8.0",
            "product_id" : "T060886"
          }
        }, {
          "category" : "product_version",
          "name" : "Menu Link Attributes 1.8.0",
          "product" : {
            "name" : "Open Source Drupal Menu Link Attributes 1.8.0",
            "product_id" : "T060886-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:menu_link_attributes__1.8.0"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "SmartLinker AI <1.0.3",
          "product" : {
            "name" : "Open Source Drupal SmartLinker AI <1.0.3",
            "product_id" : "T060887"
          }
        }, {
          "category" : "product_version",
          "name" : "SmartLinker AI 1.0.3",
          "product" : {
            "name" : "Open Source Drupal SmartLinker AI 1.0.3",
            "product_id" : "T060887-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:smartlinker_ai__1.0.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Country <2.2.1",
          "product" : {
            "name" : "Open Source Drupal Country <2.2.1",
            "product_id" : "T060888"
          }
        }, {
          "category" : "product_version",
          "name" : "Country 2.2.1",
          "product" : {
            "name" : "Open Source Drupal Country 2.2.1",
            "product_id" : "T060888-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:country__2.2.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Country <2.1.3",
          "product" : {
            "name" : "Open Source Drupal Country <2.1.3",
            "product_id" : "T060889"
          }
        }, {
          "category" : "product_version",
          "name" : "Country 2.1.3",
          "product" : {
            "name" : "Open Source Drupal Country 2.1.3",
            "product_id" : "T060889-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:country__2.1.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Easy Breadcrumb <2.0.11",
          "product" : {
            "name" : "Open Source Drupal Easy Breadcrumb <2.0.11",
            "product_id" : "T060890"
          }
        }, {
          "category" : "product_version",
          "name" : "Easy Breadcrumb 2.0.11",
          "product" : {
            "name" : "Open Source Drupal Easy Breadcrumb 2.0.11",
            "product_id" : "T060890-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:easy_breadcrumb__2.0.11"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Freelinking <4.0.3",
          "product" : {
            "name" : "Open Source Drupal Freelinking <4.0.3",
            "product_id" : "T060891"
          }
        }, {
          "category" : "product_version",
          "name" : "Freelinking 4.0.3",
          "product" : {
            "name" : "Open Source Drupal Freelinking 4.0.3",
            "product_id" : "T060891-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:freelinking__4.0.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Permissions by Term <3.1.41",
          "product" : {
            "name" : "Open Source Drupal Permissions by Term <3.1.41",
            "product_id" : "T060893"
          }
        }, {
          "category" : "product_version",
          "name" : "Permissions by Term 3.1.41",
          "product" : {
            "name" : "Open Source Drupal Permissions by Term 3.1.41",
            "product_id" : "T060893-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:permissions_by_term__3.1.41"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Examples for Developers <4.0.7",
          "product" : {
            "name" : "Open Source Drupal Examples for Developers <4.0.7",
            "product_id" : "T060894"
          }
        }, {
          "category" : "product_version",
          "name" : "Examples for Developers 4.0.7",
          "product" : {
            "name" : "Open Source Drupal Examples for Developers 4.0.7",
            "product_id" : "T060894-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:examples_for_developers__4.0.7"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Restrict route by IP <2.0.1",
          "product" : {
            "name" : "Open Source Drupal Restrict route by IP <2.0.1",
            "product_id" : "T060895"
          }
        }, {
          "category" : "product_version",
          "name" : "Restrict route by IP 2.0.1",
          "product" : {
            "name" : "Open Source Drupal Restrict route by IP 2.0.1",
            "product_id" : "T060895-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:restrict_route_by_ip__2.0.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Restrict route by IP <1.3.1",
          "product" : {
            "name" : "Open Source Drupal Restrict route by IP <1.3.1",
            "product_id" : "T060896"
          }
        }, {
          "category" : "product_version",
          "name" : "Restrict route by IP 1.3.1",
          "product" : {
            "name" : "Open Source Drupal Restrict route by IP 1.3.1",
            "product_id" : "T060896-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:restrict_route_by_ip__1.3.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Advanced Filesystem <1.0.28",
          "product" : {
            "name" : "Open Source Drupal Advanced Filesystem <1.0.28",
            "product_id" : "T060897"
          }
        }, {
          "category" : "product_version",
          "name" : "Advanced Filesystem 1.0.28",
          "product" : {
            "name" : "Open Source Drupal Advanced Filesystem 1.0.28",
            "product_id" : "T060897-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:advanced_filesystem__1.0.28"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "TFA / Passwordless Login <5.4.1",
          "product" : {
            "name" : "Open Source Drupal TFA / Passwordless Login <5.4.1",
            "product_id" : "T060898"
          }
        }, {
          "category" : "product_version",
          "name" : "TFA / Passwordless Login 5.4.1",
          "product" : {
            "name" : "Open Source Drupal TFA / Passwordless Login 5.4.1",
            "product_id" : "T060898-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:tfa__passwordless_login__5.4.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "TFA / Passwordless Login <5.5.2",
          "product" : {
            "name" : "Open Source Drupal TFA / Passwordless Login <5.5.2",
            "product_id" : "T060899"
          }
        }, {
          "category" : "product_version",
          "name" : "TFA / Passwordless Login 5.5.2",
          "product" : {
            "name" : "Open Source Drupal TFA / Passwordless Login 5.5.2",
            "product_id" : "T060899-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:tfa__passwordless_login__5.5.2"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Orphans Media",
          "product" : {
            "name" : "Open Source Drupal Orphans Media",
            "product_id" : "T060900",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:orphans_media"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "ECA Helper",
          "product" : {
            "name" : "Open Source Drupal ECA Helper",
            "product_id" : "T060901",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:drupal:drupal:eca_helper"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Drupal"
      } ],
      "category" : "vendor",
      "name" : "Open Source"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-107249",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107249"
  }, {
    "cve" : "CVE-2026-107251",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107251"
  }, {
    "cve" : "CVE-2026-107252",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107252"
  }, {
    "cve" : "CVE-2026-107254",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107254"
  }, {
    "cve" : "CVE-2026-107255",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107255"
  }, {
    "cve" : "CVE-2026-107257",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107257"
  }, {
    "cve" : "CVE-2026-107258",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107258"
  }, {
    "cve" : "CVE-2026-107259",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107259"
  }, {
    "cve" : "CVE-2026-107261",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107261"
  }, {
    "cve" : "CVE-2026-107262",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107262"
  }, {
    "cve" : "CVE-2026-107263",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107263"
  }, {
    "cve" : "CVE-2026-107264",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107264"
  }, {
    "cve" : "CVE-2026-107265",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107265"
  }, {
    "cve" : "CVE-2026-107266",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107266"
  }, {
    "cve" : "CVE-2026-107267",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107267"
  }, {
    "cve" : "CVE-2026-107306",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107306"
  }, {
    "cve" : "CVE-2026-107307",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107307"
  }, {
    "cve" : "CVE-2026-107308",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107308"
  }, {
    "cve" : "CVE-2026-107309",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107309"
  }, {
    "cve" : "CVE-2026-107310",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107310"
  }, {
    "cve" : "CVE-2026-107311",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107311"
  }, {
    "cve" : "CVE-2026-107312",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107312"
  }, {
    "cve" : "CVE-2026-96389",
    "product_status" : {
      "known_affected" : [ "T060878", "T060877", "T060899", "T060876", "T060898", "T060875", "T060897", "T060879", "T060881", "T060880", "T060885", "T060884", "T060883", "T060882", "T060900", "T060889", "T060888", "T060887", "T060886", "T060869", "T060901", "T060868", "T060870", "T060891", "T060890", "T060874", "T060896", "T060873", "T060895", "T060872", "T060894", "T060871", "T060893" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-96389"
  }, {
    "cve" : "CVE-2026-107250",
    "product_status" : {
      "known_affected" : [ "T060900", "T060901" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107250"
  }, {
    "cve" : "CVE-2026-107253",
    "product_status" : {
      "known_affected" : [ "T060900", "T060901" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107253"
  }, {
    "cve" : "CVE-2026-107268",
    "product_status" : {
      "known_affected" : [ "T060899", "T060898" ]
    },
    "release_date" : "2026-10-08T22:00:00.000+00:00",
    "title" : "CVE-2026-107268"
  } ]
}