https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:55:48.051393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-drupal-2025-13080 BIT-drupal-2025-13080 — Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 2026-10-04T00:55:48.056803+00:00

Affected: Bitnami: drupal

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1003 certfr-2025-avi-1003 — De multiples vulnérabilités ont été découvertes dans Drupal. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T00:55:48.056878+00:00 certfr-2025-avi-1003 https://cve.radiocsirt.org/vuln/euvd-2026-261236 EUVD-2026-261236 2026-10-04T00:55:48.056909+00:00 EUVD-2026-261236 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13080 fkie_cve-2025-13080 2026-10-04T00:55:48.056943+00:00

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

 https://cve.radiocsirt.org/vuln/ghsa-83v7-c2cf-p9c2 GHSA-83v7-c2cf-p9c2 — Drupal core allows Forceful Browsing 2026-10-04T00:55:48.056990+00:00

Affected: Packagist: drupal/core

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2590 WID-SEC-W-2025-2590 — Drupal Core: Mehrere Schwachstellen 2026-10-04T00:55:48.057040+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal Core ausnutzen, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, um falsche Informationen darzustellen, und um Informationen offenzulegen.