CVE-2026-96376

Published 22 October 2026 · tracked since 23 October 2026

Description

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-98957
• CVE-2026-98958
• CVE-2026-98959
• CVE-2026-98960
• CVE-2026-98961
• CVE-2026-98962
• CVE-2026-98963
• CVE-2026-98964
• CVE-2026-98949
• CVE-2026-98950

→ Open the live CVE board · all tools