Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016
Drupal core Navigation module has a permission-gated XSS flaw tracked as CVE-2026-108514.
40
Drupal core Navigation module has a permission-gated XSS flaw tracked as CVE-2026-108514.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 207 readers · 213 views · 152 reads · all time 164K views