Drupal AI Missing Authorization Vulnerability (CVE-2026-13235): Low Severity
The Drupal AI (Artificial Intelligence) module, a popular tool for integrating AI capabilities into Drupal websites, has been identified with a security flaw. This…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
Drupal AI OS Command Injection Vulnerability (CVE-2025-31693): Medium Severity
A significant security flaw has been identified in the Drupal AI (Artificial Intelligence) module, labeled as CVE-2025-31693. This vulnerability, known as OS Command Injection,…
Drupal AI OS Command Injection Vulnerability (CVE-2025-31692): High Severity
Understanding the Drupal AI OS Command Injection Vulnerability The Drupal AI (Artificial Intelligence) module, a valuable tool for integrating advanced AI features into Drupal…
Helix Ultimate Unauthenticated Arbitrary File Deletion Vulnerability (CVE-2026-57830): CRITICAL Severity
Understanding the Critical Threat of CVE-2026-57830 in Helix Ultimate A severe security flaw has been identified in the Helix Ultimate extension for Joomla!, posing…
Phoca Downloads Authenticated File Upload Vulnerability (CVE-2026-57828): High Severity
Understanding the Phoca Downloads Vulnerability The Phoca Downloads extension for Joomla, a popular tool for managing website downloads, recently addressed a critical security flaw.…
RSFiles! Unauthenticated File Upload Vulnerability (CVE-2026-57827): Critical Severity
Understanding the Critical RSFiles! Vulnerability A severe security flaw has been discovered in RSFiles!, a popular file management extension for Joomla. This vulnerability, identified…
Drupal Colorbox Cross-Site Scripting Vulnerability (CVE-2026-58591): Medium Severity
Understanding the Risk A significant security flaw, identified as Cross-site Scripting (XSS), has been discovered in the Drupal Colorbox module. This vulnerability could allow…
Drupal Plotly.js Graphing Object Injection Vulnerability (CVE-2026-55810): HIGH Severity
A significant security flaw, identified as an Object Injection vulnerability, has been discovered in the Drupal Plotly.js Graphing module. This issue, tracked as CVE-2026-55810,…
Drupal Flag attendance field Object Injection Vulnerability (CVE-2026-55809): High Severity
A significant security flaw has been identified in the Drupal Flag attendance field module, impacting users who have deployed this specific functionality on their…
FlowDrop Missing Authorization Vulnerability (CVE-2026-58589): Medium Severity
Understanding the FlowDrop Missing Authorization Vulnerability A security flaw has been identified in the FlowDrop module for Drupal, labeled as a “Missing Authorization” vulnerability.…
Drupal FlowDrop Missing Authorization Vulnerability (CVE-2026-58590): Medium Severity
A critical security update has been released for the Drupal FlowDrop module, addressing a ‘Missing Authorization’ vulnerability that could allow for forceful browsing. This…
Helix Ultimate Unauthenticated Stored XSS Vulnerability (CVE-2026-57829): Medium Severity
Understanding the Helix Ultimate XSS Vulnerability A notable security flaw, identified as CVE-2026-57829, has been discovered in the Joomla extension, Helix Ultimate. This vulnerability…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.