https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:32:06.797327+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-044 DRUPAL-CONTRIB-2026-044 2026-10-04T09:32:06.800931+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/examples

The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.

The "Read from a file" feature implemented by the file\_example submodule can be used to expose any file that PHP can access. Therefore, the file\_example sub-module is being removed from Examples for Developers until a version demonstrating file security best practices can be added back in the future. Developers who based a new module on this example should review their code for an access bypass.

 https://cve.radiocsirt.org/vuln/euvd-2026-336114 EUVD-2026-336114 2026-10-04T09:32:06.800980+00:00 EUVD-2026-336114 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11909 fkie_cve-2026-11909 2026-10-04T09:32:06.800996+00:00

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.

 https://cve.radiocsirt.org/vuln/ghsa-q6w5-4q59-rj5q GHSA-q6w5-4q59-rj5q 2026-10-04T09:32:06.801018+00:00

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1882 WID-SEC-W-2026-1882 — Drupal: Mehrere Schwachstellen 2026-10-04T09:32:06.801032+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und weitere, nicht spezifizierte Auswirkungen zu verursachen.