CVE-2026-55806

score

0.1

cvss

5.9

epss

0.3%

published

2026-07-10

kev added

—

first seen

2026-10-21

Drupal Drupal core <= 10.5.12, 10.6.0 <= 10.6.11, 11.2.0 <= 11.2.14, 11.3.0 <= 11.3.12, and 0.0.0 to 11.1.* contains an open redirect vulnerability caused by improper URL validation, letting attackers perform URL redirection to untrusted sites and content spoofing, exploit requires crafted URL.