CVE-2026-8492

LowCVSS 2.7

Published: 19/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

A Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate before version 3.0.5 allows Resource Location Spoofing.

Risk Assessment

An attacker can spoof trusted resource locations, potentially leading to injection of malicious content or data theft.

Recommendation

Update the Translate Drupal with GTranslate module to version 3.0.5 or later.

Original NVD description (English source)

Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.