CVE-2026-16643

Awaiting Analysis Awaiting Analysis - Queue

Cross-Site Scripting in Drupal Lunr Exposed Filters

Publication date: 2026-08-25

Last updated on: 2026-08-28

Assigner: Drupal.org

Description

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-28

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-14

NVD

CVE-2026-16643

EUVD

EUVD-2026-66204

Affected Vendors & Products

Vendor	Product	Version / Range
drupal	lunr_exposed_filters	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability affects Drupal Lunr exposed filters versions *.* and involves an unspecified issue that could allow unauthorized access or manipulation of exposed filters.

Impact Analysis

The impact depends on the specific nature of the vulnerability. It could lead to data breaches, unauthorized modifications, or service disruptions if exploited.

Mitigation Strategies

Update Drupal Lunr exposed filters to the latest version to address the vulnerability. Check for available patches or updates from the official Drupal website or module maintainers.

Hi! I’m here to help you understand CVE-2026-16643. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70