CVE-2026-87936None▾ SunlitImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.
amazee.ai_private_ai_provider >= 0.0.0 < 1.3.7amazee.ai_private_ai_provider >= 1.4.0 < 1.4.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-87938NoneCSP log - Critical - SQL Injection - SA-CONTRIB-2026-136
CVE-2026-9082Critical· 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 1…
CVE-2026-96386NoneSmart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190
CVE-2026-96382NoneDiba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191
CVE-2026-96392NoneAI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187
CVE-2026-96380NoneCSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189