https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:25:45.551452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05545 bdu:2020-05545 2026-10-07T15:25:45.557277+00:00 bdu:2020-05545 https://cve.radiocsirt.org/vuln/bit-drupal-2020-13671 BIT-drupal-2020-13671 2026-10-07T15:25:45.557316+00:00

Affected: Bitnami: drupal

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-760 certfr-2020-avi-760 — Une vulnérabilité a été découverte dans Drupal Core. Elle permet à un attaquant de provoquer une exécution de code arbi… 2026-10-07T15:25:45.557352+00:00 certfr-2020-avi-760 https://cve.radiocsirt.org/vuln/cnvd-2020-64563 cnvd-2020-64563 2026-10-07T15:25:45.557370+00:00 cnvd-2020-64563 https://cve.radiocsirt.org/vuln/euvd-2026-256049 EUVD-2026-256049 2026-10-07T15:25:45.557383+00:00 EUVD-2026-256049 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13671 fkie_cve-2020-13671 2026-10-07T15:25:45.557393+00:00

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

 https://cve.radiocsirt.org/vuln/ghsa-68jc-v27h-vhmw GHSA-68jc-v27h-vhmw — Drupal core Unrestricted Upload of File with Dangerous Type 2026-10-07T15:25:45.557415+00:00

Affected: Packagist: drupal/core, Packagist: drupal/drupal

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

 https://cve.radiocsirt.org/vuln/gsd-2020-13671 gsd-2020-13671 2026-10-07T15:25:45.557441+00:00 gsd-2020-13671 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13671 UBUNTU-CVE-2020-13671 2026-10-07T15:25:45.557452+00:00

Affected: Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1938 WID-SEC-W-2024-1938 — Drupal: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2026-10-07T15:25:45.557472+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.