Drupal core - Critical - Remote code execution - SA-CORE-2026-014

https://www.drupal.org/sa-core-2026-014

Upcoming critical Drupal core release on October 14, 2026 - PSA-2026-10-12

https://www.drupal.org/psa-2026-10-12

Thrilled to announce that four provisional members have earned full membership on the Drupal Security Team!

Welcome:
🇫🇷 Pierre Rudloff
🇦🇺 Joseph Zhao
🇧🇪 Bram Driesen
🇺🇸 Swan Kalata

https://www.drupal.org/drupal-security-team/about/blog/welcoming-four-new-full-members-to-the-drupal-security-team

#Drupal #OpenSource #Security

Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

https://www.drupal.org/sa-contrib-2026-217

Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216

https://www.drupal.org/sa-contrib-2026-216

Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215

https://www.drupal.org/sa-contrib-2026-215

Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

https://www.drupal.org/sa-contrib-2026-214

SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210

https://www.drupal.org/sa-contrib-2026-210

Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213

https://www.drupal.org/sa-contrib-2026-213

Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211

https://www.drupal.org/sa-contrib-2026-211

Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212

https://www.drupal.org/sa-contrib-2026-212

Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207

https://www.drupal.org/sa-contrib-2026-207

DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208

https://www.drupal.org/sa-contrib-2026-208

Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209

https://www.drupal.org/sa-contrib-2026-209

Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206

https://www.drupal.org/sa-contrib-2026-206

Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205

https://www.drupal.org/sa-contrib-2026-205

Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204

https://www.drupal.org/sa-contrib-2026-204

Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203

https://www.drupal.org/sa-contrib-2026-203

Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202

https://www.drupal.org/sa-contrib-2026-202

Actstream - Critical - Access bypass - SA-CONTRIB-2026-198

https://www.drupal.org/sa-contrib-2026-198