https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:20:52.964599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-056 DRUPAL-CONTRIB-2026-056 2026-10-03T13:20:52.968162+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/ai_agents

This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools.

The module does not sufficiently check the required permissions when a tool loads content entities.

This vulnerability is mitigated by the fact that an agent must be configured to use the affected tool, and an attacker must have access to that agent.

 https://cve.radiocsirt.org/vuln/euvd-2026-336108 EUVD-2026-336108 2026-10-03T13:20:52.968216+00:00 EUVD-2026-336108 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13236 fkie_cve-2026-13236 2026-10-03T13:20:52.968233+00:00

Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

 https://cve.radiocsirt.org/vuln/ghsa-vqr6-3h85-q7hp GHSA-vqr6-3h85-q7hp 2026-10-03T13:20:52.968256+00:00

Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000101 jvndb-2026-000101 2026-10-03T13:20:52.968271+00:00

AI Agents provided by Drupal contains the vulnerability listed below.<a href='https://cwe.mitre.org/data/definitions/863.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-13236' target='_blank'></a><ul><li>Incorrect authorization (CWE-863) - CVE-2026-13236</li></ul>Kuniyoshi Noguchi @KuniNogu reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer to publish the advisory under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen 2026-10-03T13:20:52.968292+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.