https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T17:50:14.710760+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11383 cnvd-2016-11383 2026-10-16T17:50:14.714172+00:00 cnvd-2016-11383 https://cve.radiocsirt.org/vuln/euvd-2026-87835 EUVD-2026-87835 2026-10-16T17:50:14.714204+00:00 EUVD-2026-87835 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9450 fkie_cve-2016-9450 2026-10-16T17:50:14.714218+00:00

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.

 https://cve.radiocsirt.org/vuln/ghsa-98w5-wqp9-w466 GHSA-98w5-wqp9-w466 — Drupal Incorrect cache context on password reset page 2026-10-16T17:50:14.714243+00:00

Affected: Packagist: drupal/core, Packagist: drupal/drupal

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.

 https://cve.radiocsirt.org/vuln/gsd-2016-9450 gsd-2016-9450 2026-10-16T17:50:14.714267+00:00 gsd-2016-9450