CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection.

• Severity: Unscored
• EPSS 0.17%
• P4 · Track

Why P4: track.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.

Weakness

• CWE-89

References

• NVD record NVD
• CVE Program record CVE Program
• Reference NVD
• GitHub security advisory GitHub

Published 2026-10-22 · sources: NVD, GitHub Advisory Database