CVE-2026-55803 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 27.87%

Affected Products (NVD)

Vendor	Product	Version
drupal	drupal	𝑥 < 10.5.12
drupal	drupal	10.6.0 ≤ 𝑥 < 10.6.11
drupal	drupal	11.0.0 ≤ 𝑥 < 11.2.14
drupal	drupal	11.3.0 ≤ 𝑥 < 11.3.12

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
The software receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

Vulnerability Media Exposure

[ENGLISH] ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than they actually are. Plenty to clean up. Here’s the short version. ⚡ Threat of the Week U.S.
Published: 2026-08-24T20:02:10+05:30

References

https://www.drupal.org/sa-core-2026-005