medium5.9
CVE-2026-55806
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing.
Impact
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | before 10.5.12 from 10.6.0 before 10.6.11 from 11.0.0 before 11.2.14 from 11.3.0 before 11.3.12 |