CVE-2026-96392 | Drupal AI CKEditor up to 1.4.2 Template Engine code injection

October 22, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Drupal AI CKEditor up to 1.4.2. The affected element is an unknown function of the component Template Engine. This manipulation causes code injection.

This vulnerability is tracked as CVE-2026-96392. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More