https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:23:17.334091+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-055 DRUPAL-CONTRIB-2026-055 2026-10-04T05:23:17.396728+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/ai

This module enables you to utilize an agent to use Drupal core actions tools with bypassed access.

Certain Drupal core actions, exposed as agent tools did not have correct access validation, and some core actions were missing associated access-level definitions.

This vulnerability is mitigated by the fact that an attacker must have access to communicate with an affected agent, the site must be configured to expose the affected tools to non-privileged users.

 https://cve.radiocsirt.org/vuln/euvd-2026-336111 EUVD-2026-336111 2026-10-04T05:23:17.396784+00:00 EUVD-2026-336111 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13235 fkie_cve-2026-13235 2026-10-04T05:23:17.396799+00:00

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.

 https://cve.radiocsirt.org/vuln/ghsa-4c7f-qhrm-6jc8 GHSA-4c7f-qhrm-6jc8 2026-10-04T05:23:17.396820+00:00

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen 2026-10-04T05:23:17.396834+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.