CVE-2026-6365
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
Published Apr 15, 2026 · Drupal Drupal
CVE-2026-6365 is listed by Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 15, 2026 · Drupal Security
Detected
Project: Drupal core Project machine name: drupal <div cl
Sources
- Drupal SecurityVendor advisoryCVE-2026-6365
Project: Drupal core Project machine name: drupal <div cl
drupal.org