CVE-2026-87938 is an SQL Injection vulnerability in the Drupal CSP log component affecting versions from 0.0.0 up to 1.0.2. The flaw allows improper neutralization of special elements in SQL commands, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level with high confidentiality and integrity impact but no availability impact.