{"id":"CVE-2026-87941","kind":"vulnerability","aliases":["CVE-2026-87941"],"related":[],"title":"Drupal Patreon module: unspecified flaw in version 7.x","description":"Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.","summary":"The Drupal Patreon module has an unspecified vulnerability in versions 7.x, per the NVD entry. The sources do not say what an attacker can do with it.","severity":"unknown","cvss":null,"epss":0.0015,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["drupal","package","patreon-module"],"not_affected_if":["module-not-installed"],"how_to_check":"- Check whether the site runs the Drupal Patreon module at version `7.x`, for example with `drush pm:list --filter=patreon` on the Drupal install.","fix":null,"status":"open","published_at":"2026-10-22T02:17:03+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T05:00:35+00:00","updated_at":"2026-10-25T05:00:35+00:00","category":"package","confidence":0.3,"triage":{"at":"2026-10-25T05:00:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Drupal Patreon module: unspecified flaw in version 7.x","impact":"medium","summary":"The Drupal Patreon module has an unspecified vulnerability in versions 7.x, per the NVD entry. The sources do not say what an attacker can do with it.","category":"package","nicknames":[],"who_cares":["drupal","patreon-module"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the sources do not describe the impact","analyst_note":"Find the Drupal advisory or the NVD CPE detail for the Patreon 7.x module to learn the flaw type, the fixed version, and the exposure.","how_to_check":"- Check whether the site runs the Drupal Patreon module at version `7.x`, for example with `drush pm:list --filter=patreon` on the Drupal install.","needs_analyst":true,"not_affected_if":["module-not-installed"],"who_is_affected":"Sites running the Drupal Patreon module at version 7.x. The sources do not describe the exposed configuration or data path. Sites without this module can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00054,"input_tokens":3260,"output_tokens":429,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-87941':12A,15A '7':8A,31B,54C 'affect':51C 'attack':44B 'cve':10A,13A 'drupal':1A,16B,22B,47C 'entri':36B 'flaw':5A 'issu':50C 'modul':3A,20B,24B 'nvd':35B 'packag':17B 'patreon':2A,19B,23B,48C,52C 'patreon-modul':18B 'per':33B 'say':41B 'sourc':38B 'unspecifi':4A,27B 'version':7A,30B,53C 'vulner':28B,45C 'x':9A,32B,55C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Drupal Patreon module at version 7.x. The sources do not describe the exposed configuration or data path. Sites without this module can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T02:17:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-87941","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87941","severity":null,"published_at":"2026-10-22T02:17:03+00:00","modified_at":"2026-10-22T16:21:29+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-87941","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-87941","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:52+00:00","fetched_at":"2026-10-24T07:15:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}