{"id":"CVE-2026-96392","kind":"vulnerability","aliases":["CVE-2026-96392"],"related":[],"title":"Drupal AI CKEditor: template engine flaw allows code injection up to 1.4.3","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","summary":"The Drupal AI CKEditor module mishandles special characters in template input, which allows code injection. The sources say versions from 0.0.0 through 1.4.3 are affected and rate it low severity (CVSS 3.5) with low exploitation likelihood (EPSS 0.002).","severity":"low","cvss":3.5,"epss":0.00156,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-ckeditor","drupal","package","php"],"not_affected_if":["module-not-installed"],"how_to_check":"- Check the installed AI CKEditor module version in the Drupal project (for example with `drush pm:list --filter=ai_ckeditor` or `composer show drupal/ai_ckeditor`, unknown if the module machine name differs)\n- Treat any version at or below `1.4.3` as affected","fix":"- Upgrade the Drupal AI CKEditor module to a version newer than `1.4.3` (the sources do not name the fixed version)","status":"open","published_at":"2026-10-22T02:17:09+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T04:45:35+00:00","updated_at":"2026-10-25T04:45:35+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T04:45:35Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade the Drupal AI CKEditor module to a version newer than `1.4.3` (the sources do not name the fixed version)","reach":"unknown","title":"Drupal AI CKEditor: template engine flaw allows code injection up to 1.4.3","impact":"high","summary":"The Drupal AI CKEditor module mishandles special characters in template input, which allows code injection. The sources say versions from 0.0.0 through 1.4.3 are affected and rate it low severity (CVSS 3.5) with low exploitation likelihood (EPSS 0.002).","category":"package","nicknames":[],"who_cares":["drupal","php","ai-ckeditor"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker injects code that the site's template engine executes","analyst_note":"Check the NVD entry and the Drupal security advisory for the fixed version, required privileges, and whether the injection is reachable without authentication.","how_to_check":"- Check the installed AI CKEditor module version in the Drupal project (for example with `drush pm:list --filter=ai_ckeditor` or `composer show drupal/ai_ckeditor`, unknown if the module machine name differs)\n- Treat any version at or below `1.4.3` as affected","needs_analyst":true,"not_affected_if":["module-not-installed"],"who_is_affected":"Sites running the Drupal AI CKEditor module at version 1.4.3 or earlier are in scope. The sources do not describe which configurations or roles make a site reachable, so unknown beyond that.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000622,"input_tokens":3341,"output_tokens":576,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-96392':15A,18A '0.0.0':45B,88C '0.002':62B '1.4.3':12A,47B,90C '3.5':56B 'affect':49B,83C 'ai':2A,20B,27B,76C,84C 'ai-ckeditor':19B 'allow':7A,37B,78C 'charact':32B 'ckeditor':3A,21B,28B,77C,85C 'code':8A,38B,79C 'cve':13A,16A 'cvss':55B 'drupal':1A,22B,26B,75C 'element':67C 'engin':5A,72C 'epss':61B 'exploit':59B 'flaw':6A 'improp':63C 'inject':9A,39B,80C 'input':35B 'issu':82C 'likelihood':60B 'low':53B,58B 'mishandl':30B 'modul':29B 'neutral':64C 'packag':23B 'php':24B 'rate':51B 'say':42B 'sever':54B 'sourc':41B 'special':31B,66C 'templat':4A,34B,71C 'use':68C 'version':43B,86C 'vulner':73C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Drupal AI CKEditor module at version 1.4.3 or earlier are in scope. The sources do not describe which configurations or roles make a site reachable, so unknown beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T02:17:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96392","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96392","severity":null,"published_at":"2026-10-22T02:17:09+00:00","modified_at":"2026-10-22T16:54:17+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-96392","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-96392","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}