CVE-2026-96389

Published 30 October 2026 · tracked since 30 October 2026

Description

Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from 0.0.0 to 1.6.3, from 2.0.0 to 2.0.4, from 3.0.0 to 3.1.1.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-59387 HIGH 8.8
• CVE-2026-97645 HIGH 7.2
• CVE-2026-89435 HIGH 8.8
• CVE-2026-90437 HIGH 7.2
• CVE-2026-116622 HIGH 7.2
• CVE-2026-110732 HIGH 7.5
• CVE-2026-103039 CRITICAL 9.8
• CVE-2026-118698 MEDIUM 6.5
• CVE-2026-119059 MEDIUM 4.3
• CVE-2026-119087 MEDIUM 4.3

→ Open the live CVE board · all tools