Skip to content
OpenAdvisories
High · 8.1 CVE-2026-13244 DRUPAL-CONTRIB-2026-064EUVD-2026-43068GHSA-7cjh-fc62-8rrg

Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064

Published Jul 10, 2026 · Updated Jul 13, 2026 · Assigned by drupal

Description

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0.

Affected products

VendorProductAffectedFixed
Drupal Tealium iQ Tag Management 0.0.0 – < 2.4.0 2.4.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/tealiumiq < 2.4.0 2.4.0 DRUPAL-CONTRIB-2026-064

Advisories 1

References