https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:23:59.503586+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-089 DRUPAL-CONTRIB-2025-089 2026-10-17T11:23:59.507241+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/file_download

The File Download enables you to allow users to download file and image entities directly using a custom field formatter. It also provides an optional submodule to count and display file downloads in Views, similar to how the core statistics module tracks content views.

The File Download module does not properly validate input when handling file access requests. This can allow users to bypass protections and access private files that should not be publicly available.

 https://cve.radiocsirt.org/vuln/euvd-2026-248094 EUVD-2026-248094 2026-10-17T11:23:59.507299+00:00 EUVD-2026-248094 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7717 fkie_cve-2025-7717 2026-10-17T11:23:59.507315+00:00

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-444f-w9rc-6jxq GHSA-444f-w9rc-6jxq 2026-10-17T11:23:59.507336+00:00

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1587 WID-SEC-W-2025-1587 — Drupal-Module: Mehrere Schwachstellen 2026-10-17T11:23:59.507351+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten und die Sicherheitsmaßnahmen zu umgehen.