Search vulnerabilities

Results 2

Export CSV
CVE-2026-118562

Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275

Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-118561

Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors