Drupal
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
SA-CORE-2026-002 Apr 15, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-002. 3 reporter(s), 9 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2026-002
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
12 lines
Showing 1–12 of 12
CVE-2026-6366
BR2026-0000-008566
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Truong Le (hswww)
CVE-2026-6366
BR2026-0000-008567
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as menon
CVE-2026-6366
BR2026-0000-008568
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as t-chen
CVE-2026-6366
BR2026-0000-008569
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Benji Fisher (benjifisher) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008570
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as cilefen (cilefen) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008571
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Neil Drumm (drumm) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008572
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Greg Knaddison (greggles) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008573
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008574
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Dave Long (longwave) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008575
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008576
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Ra Mänd (ram4nd), provisional member of the Drupal Security Team
CVE-2026-6366
BR2026-0000-008577
unclaimed
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Credited as Jess (xjm) of the Drupal Security Team