https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T20:26:17.135382+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-067 DRUPAL-CONTRIB-2025-067 2026-10-14T20:26:17.138401+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/commerce_alphabank_redirect

This module enables you to pay for Commerce order to an environment provided and secured by the bank

The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed.

 https://cve.radiocsirt.org/vuln/euvd-2026-244026 EUVD-2026-244026 2026-10-14T20:26:17.138456+00:00 EUVD-2026-244026 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48446 fkie_cve-2025-48446 2026-10-14T20:26:17.138519+00:00

Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3.

 https://cve.radiocsirt.org/vuln/ghsa-48wx-8736-jgx2 GHSA-48wx-8736-jgx2 — Drupal Commerce Alphabank Redirect Incorrect Authorization vulnerability 2026-10-14T20:26:17.138544+00:00

Affected: Packagist: drupal/commerce_alphabank_redirect

Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse. This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1119 WID-SEC-W-2025-1119 — Drupal Produkte: Mehrere Schwachstellen 2026-10-14T20:26:17.138565+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting durchzuführen oder einen Denial of Service auszuführen.