PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-15084 Drupal CVE debrief

The CVE-2026-15084 vulnerability is a Stored Cross-site Scripting (XSS) issue in Drupal UI Patterns (SDC in Drupal UI) versions from 2.0.0 to 2.0.17. This Improper Neutralization of Input During Web Page Generation vulnerability allows attackers to inject malicious scripts into web pages, potentially leading to unauthorized actions or data breaches. Users of affected versions should review and apply patches to prevent exploitation. The CVE record was published on 2026-07-10T22:16:41.127Z and has not been modified since then. Further verification of affected systems and user interactions is recommended.

Vendor
Drupal
Product
UI Patterns (SDC in Drupal UI)
CVSS
MEDIUM 5.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-10
Original CVE updated
2026-08-06
Advisory published
2026-07-10
Advisory updated
2026-08-06

Who should care

Users of Drupal UI Patterns (SDC in Drupal UI) from version 2.0.0 to 2.0.17 should review and apply the necessary patches to prevent Stored XSS attacks. This includes administrators, security teams, and developers responsible for maintaining and securing Drupal UI Patterns installations. Additionally, operators and platform managers who rely on these components should assess their exposure and take appropriate mitigation actions.

Technical summary

The CVE-2026-15084 vulnerability is classified as Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). It affects Drupal UI Patterns (SDC in Drupal UI) versions from 2.0.0 to 2.0.17, allowing for Stored XSS attacks. This type of vulnerability can lead to unauthorized actions or data breaches if exploited. Users of affected versions should review and apply patches to prevent exploitation.

Defensive priority

Medium priority for users of affected Drupal UI Patterns versions, as it requires user interaction to exploit but can lead to significant impact if successful.

Recommended defensive actions

  • Review and apply patches for Drupal UI Patterns (SDC in Drupal UI) versions 2.0.0 to 2.0.17
  • Implement input validation and output encoding for user-generated content
  • Monitor for suspicious activity and user interactions on the affected systems
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Evidence notes

Evidence is limited; primary official records indicate a Stored XSS vulnerability in Drupal UI Patterns (SDC in Drupal UI). Further verification is recommended through reviewing official advisories, checking system logs for suspicious activity, and validating user input handling. The CVE record and NVD detail page provide initial points of reference. Additional evidence may be needed to fully assess the vulnerability's impact and to ensure thorough mitigation.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-15084 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-15084

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-15084 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-15084

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.