Drupal
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
SA-CORE-2026-007 Jun 17, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-007. 3 reporter(s), 1 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2026-007
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4
CVE-2026-55806
BR2026-0000-007355
unclaimed
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
Credited as Melih Acikoz
CVE-2026-55806
BR2026-0000-007356
unclaimed
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
Credited as Michael Winser (michaelwinser)
CVE-2026-55806
BR2026-0000-007357
unclaimed
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
Credited as Willem Drupal enthousiast (willempje2)
CVE-2026-55806
BR2026-0000-007358
unclaimed
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
Credited as Lee Rowlands (larowlan) of the Drupal Security Team