CRITICAL
9.8 CVE-2026-107249 Published 30 Oct 2026
Drupal Block AJAX Object Injection Vulnerability
Worried this affects your website?
A vulnerability in Drupal Block AJAX allows Object Injection due to improperly controlled modification of dynamically-determined object attributes.
The issue affects the following versions:
- Block AJAX versions from 0.0.0 to 3.0.2
Reference: CVE-2026-107249 on NVD
← Back to Security News