https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:56:54.964386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-108 DRUPAL-CONTRIB-2025-108 2026-10-07T09:56:54.967839+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/access_code

This module enables users to sign in with an access code instead of entering user names and passwords. When users are allowed to pick their own access codes, they can guess other users' access codes based on the fact that access codes need to be unique and the system warns if the code of their choice is taken.

This vulnerability is mitigated by the fact that an attacker must have a role with the "change own access code" permission.

 https://cve.radiocsirt.org/vuln/euvd-2026-257169 EUVD-2026-257169 2026-10-07T09:56:54.967899+00:00 EUVD-2026-257169 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10928 fkie_cve-2025-10928 2026-10-07T09:56:54.967915+00:00

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.5.

 https://cve.radiocsirt.org/vuln/ghsa-27mc-9399-r9mx GHSA-27mc-9399-r9mx — Drupal Access code allows Brute Force Attempts 2026-10-07T09:56:54.967938+00:00

Affected: Packagist: drupal/access_code

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force. This issue affects Access code: from 0.0.0 before 2.0.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2126 WID-SEC-W-2025-2126 — Drupal Module: Mehrere Schwachstellen 2026-10-07T09:56:54.967958+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal Module ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um falsche Informationen darzustellen.