https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T20:35:20.124347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-drupal-2023-31250 BIT-drupal-2023-31250 — Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005 2026-10-15T20:35:20.128882+00:00

Affected: Bitnami: drupal

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

 https://cve.radiocsirt.org/vuln/cnvd-2023-36310 cnvd-2023-36310 2026-10-15T20:35:20.128929+00:00 cnvd-2023-36310 https://cve.radiocsirt.org/vuln/euvd-2026-213161 EUVD-2026-213161 2026-10-15T20:35:20.128946+00:00 EUVD-2026-213161 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31250 fkie_cve-2023-31250 2026-10-15T20:35:20.128958+00:00

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

 https://cve.radiocsirt.org/vuln/ghsa-8849-cv9f-vccm GHSA-8849-cv9f-vccm — Access bypass in Drupal core 2026-10-15T20:35:20.128980+00:00

Affected: Packagist: drupal/core

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

 https://cve.radiocsirt.org/vuln/gsd-2023-31250 gsd-2023-31250 2026-10-15T20:35:20.129003+00:00 gsd-2023-31250 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-31250 UBUNTU-CVE-2023-31250 2026-10-15T20:35:20.129014+00:00

Affected: Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1083 WID-SEC-W-2023-1083 — Drupal: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-15T20:35:20.129034+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Informationen offenzulegen.