CVEvulnerability
CVE-2026-87938
- Status
- Awaiting Analysis
- Published
- 2026-10-22
- Last modified
- 2026-10-22
- Assigner
- [email protected]
- Weaknesses
- CWE-89
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://www.drupal.org/sa-contrib-2026-136 www.drupal.org