Early access. This site has moved to bugrater.com.

Security releases

Drupal

Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006

SA-CORE-2026-006 Jun 17, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-006. 1 reporter(s), 3 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-core-2026-006
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

4 lines
Showing 1–4 of 4
CVE-2026-55804 BR2026-0000-007359 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
Credited as Michael Maturi (michaelmaturi)
CVE-2026-55804 BR2026-0000-007360 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2026-55804 BR2026-0000-007361 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2026-55804 BR2026-0000-007362 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
Credited as Mohit Aghera (mohit_aghera)