catch (catch)
14 credited records · 12 in the last 12 months · 1 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2026-110738No exploit | Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219drupal · gin admin theme · CWE-79 | Medium6.5 | — | 0.1% | Oct 30, 2026 |
26Monitor | CVE-2026-108515No exploit | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015drupal · drupal core · CWE-79 | Medium6.5 | — | 0.1% | Oct 30, 2026 |
32Monitor | CVE-2026-108099No exploit | Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218drupal · entity list · CWE-470 | High8.1 | — | 0.3% | Oct 30, 2026 |
32Monitor | CVE-2026-108097Proof of concept | Drupal core - Critical - Remote code execution - SA-CORE-2026-014drupal · drupal core · CWE-470 | High8.1 | — | 0.3% | Oct 30, 2026 |
18Monitor | CVE-2026-15917No exploit | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011drupal · drupal core · CWE-79 | Medium4.7 | — | 0.2% | Aug 25, 2026 |
16Monitor | CVE-2026-15916No exploit | Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010drupal · drupal core · CWE-862 | Medium4.2 | — | 0.1% | Aug 25, 2026 |
23Monitor | CVE-2026-55806No exploit | Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007drupal · drupal · CWE-601 | Medium5.9 | — | 0.3% | Jul 10, 2026 |
96Now | CVE-2026-9082Weaponized | Drupal core - Highly critical - SQL injection - SA-CORE-2026-004drupal · drupal · CWE-89 | Critical9.8 | KEV | 89.3% | May 20, 2026 |
14Monitor | CVE-2025-13083No exploit | Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008drupal · drupal · CWE-525 | Low3.7 | — | 0.2% | Nov 18, 2025 |
17Monitor | CVE-2025-13082No exploit | Drupal core - Moderately critical - Defacement - SA-CORE-2025-007drupal · drupal · CWE-451 | Medium4.3 | — | 0.2% | Nov 18, 2025 |
23Monitor | CVE-2025-13081No exploit | Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006drupal · drupal · CWE-915 | Medium5.9 | — | 0.2% | Nov 18, 2025 |
21Monitor | CVE-2025-13080No exploit | Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005drupal · drupal · CWE-754 | Medium5.3 | — | 0.3% | Nov 18, 2025 |
35Monitor | CVE-2025-8675No exploit | AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095ai seo link advisor project · ai seo link advisor · CWE-918 | High8.8 | — | 0.2% | Aug 15, 2025 |
24Monitor | CVE-2025-3057No exploit | Drupal core - Critical - Cross site scripting - SA-CORE-2025-001drupal · drupal · CWE-79 | Medium6.1 | — | 0.3% | Mar 31, 2025 |
- CVE-2026-11073826Monitor
Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219
MediumCVSS 6.5No exploitEPSS 0%drupal · gin admin themeOct 30, 2026
- CVE-2026-10851526Monitor
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
MediumCVSS 6.5No exploitEPSS 0%drupal · drupal coreOct 30, 2026
- CVE-2026-10809932Monitor
Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218
HighCVSS 8.1No exploitEPSS 0%drupal · entity listOct 30, 2026
- CVE-2026-10809732Monitor
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
HighCVSS 8.1Proof of conceptEPSS 0%drupal · drupal coreOct 30, 2026
- CVE-2026-1591718Monitor
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
MediumCVSS 4.7No exploitEPSS 0%drupal · drupal coreAug 25, 2026
- CVE-2026-1591616Monitor
Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010
MediumCVSS 4.2No exploitEPSS 0%drupal · drupal coreAug 25, 2026
- CVE-2026-5580623Monitor
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
MediumCVSS 5.9No exploitEPSS 0%drupal · drupalJul 10, 2026
- CVE-2026-908296Now
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
CriticalCVSS 9.8KEVWeaponizedEPSS 89%drupal · drupalMay 20, 2026
- CVE-2025-1308314Monitor
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
LowCVSS 3.7No exploitEPSS 0%drupal · drupalNov 18, 2025
- CVE-2025-1308217Monitor
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
MediumCVSS 4.3No exploitEPSS 0%drupal · drupalNov 18, 2025
- CVE-2025-1308123Monitor
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
MediumCVSS 5.9No exploitEPSS 0%drupal · drupalNov 18, 2025
- CVE-2025-1308021Monitor
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
MediumCVSS 5.3No exploitEPSS 0%drupal · drupalNov 18, 2025
- CVE-2025-867535Monitor
AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095
HighCVSS 8.8No exploitEPSS 0%ai seo link advisor project · ai seo link advisorAug 15, 2025
- CVE-2025-305724Monitor
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
MediumCVSS 6.1No exploitEPSS 0%drupal · drupalMar 31, 2025