Drupal Block AJAX vulnerabilities (CVE)

CVE records published for Drupal Block AJAX, newest first. Follow to get an email when a new one appears.

1 results

9.8Critical

CVE-2026-107249 3 days ago

Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192

Drupal Block AJAX

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object Injection. This issue affects Block AJAX versions: from 0.0.0 to 3.0.2.