CVE-2026-118562
Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275
Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.
CVSS 3.1 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products