CVE-2026-8492: Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

Severity: low (CVSS 2.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-19 · updated 2026-07-23
Weakness: CWE-471

Description

Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

Affected products

Drupal Translate Drupal with GTranslate: before 3.0.5 — fixed in 3.0.5

How to fix

Upgrade to a fixed version: Drupal Translate Drupal with GTranslate 3.0.5. Check the vendor advisory for mitigations.

References

https://www.drupal.org/sa-contrib-2026-035

Get alerted when CVE-2026-8492 or the next vulnerability affects your stack