🔐 CVE Alert

CVE-2026-107259

UNKNOWN 0.0

Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0.

CWE CWE-1336
Vendor drupal
Product linked field
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal linked field

Be the first to know when new unknown vulnerabilities affecting drupal linked field are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Linked Field
0.0.0 < 1.8.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-200

Credits

Maksim Hayder (tr_jan) Vitaliy Bogomazyuk (vitaliyb98) Yannick (yannickoo) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)