Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-176 (CVE-2026-96375)

    Vulnerability from drupal – Published: 2026-09-23 16:50 – Updated: 2026-09-23 16:53 – Source website
    VLAI
    Details

    The Cloud module enables users to manage cloud infrastructure through Drupal.

    The Kubernetes and VMware integrations do not properly validate TLS certificates when connecting to remote API endpoints. An attacker who can intercept these connections may obtain secret tokens or other credentials, potentially allowing unauthorized access to the connected infrastructure.

    Credits
    Kalle Kipinä (kekkis) www.drupal.org/u/kekkis
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c7.0.1"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/cloud"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c7.0.1"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-96375"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/kekkis"
      ],
      "name": "Kalle Kipin\u00e4 (kekkis)"
    }
  ],
  "details": "The Cloud module enables users to manage cloud infrastructure through Drupal.\n\nThe Kubernetes and VMware integrations do not properly validate TLS certificates when connecting to remote API endpoints. An attacker who can intercept these connections may obtain secret tokens or other credentials, potentially allowing unauthorized access to the connected infrastructure.",
  "id": "DRUPAL-CONTRIB-2026-176",
  "modified": "2026-09-23T16:53:19.000Z",
  "published": "2026-09-23T16:50:15.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-176"
    }
  ],
  "schema_version": "1.7.0"
}