← Vulnerability Intelligence

CVE-2026-118568

Not yet rated

Not yet rated — under the NVD policy in effect since April 2026, most CVEs are no longer analyzed immediately. The EPSS score (if available) is still shown.

Description

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.

Metrics

EPSS — exploit probability
0% (percentile: 3) as of 1 November 2026
CWE
CWE-922

References