---
id: "CVE-2026-87941"
kind: "vulnerability"
aliases: ["CVE-2026-87941"]
title: "Drupal Patreon module: unspecified flaw in version 7.x"
severity: "unknown"
cvss: null
epss: 0.0015
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["drupal", "package", "patreon-module"]
not_affected_if: ["module-not-installed"]
published_at: "2026-10-22T02:17:03+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-25T05:00:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87941", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-87941", "first_seen_at": "2026-10-24T07:15:52+00:00"}]
---

# Drupal Patreon module: unspecified flaw in version 7.x

The Drupal Patreon module has an unspecified vulnerability in versions 7.x, per the NVD entry. The sources do not say what an attacker can do with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the site runs the Drupal Patreon module at version `7.x`, for example with `drush pm:list --filter=patreon` on the Drupal install.

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87941
- 2026-10-24T07:15:52+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-87941

## From the sources

Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_