## Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2026-55808
- 公開日時: 2026-06-17T18:58:02.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2026-009)
- パーマリンク: https://vulnpulse.app/items/drupal-security-556fc1431384

Project: Drupal core Project machine name: drupal Date: 2026-June-17 Security risk: Moderately critical 11 ∕ 25 AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Improper validation Affected versions: <10.5.12 || >=10.6.0 <10.6.11 || >=11.2.0 <11.2.14 || >=11.3.0 <11.3.12 || 11.0.* || 11.1.* CVE IDs: CVE-2026-55808 Description: The JSON:API and REST modules allow you to upload image files to image fields. The validation rules check the file extension of the uploaded file but not the file MIME type. This may allow a malicious user to upload a file that is not an image.…