https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:26:44.334450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-057 DRUPAL-CONTRIB-2026-057 2026-10-03T13:26:44.401976+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/ai_agents

This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools.

Under certain circumstances, the agent inherits deterministic parameters when invoking the same tool in one request, which can lead to information disclosure.

 https://cve.radiocsirt.org/vuln/euvd-2026-336098 EUVD-2026-336098 2026-10-03T13:26:44.402040+00:00 EUVD-2026-336098 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13237 fkie_cve-2026-13237 2026-10-03T13:26:44.402058+00:00

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

 https://cve.radiocsirt.org/vuln/ghsa-7c7x-54hv-3m8c GHSA-7c7x-54hv-3m8c 2026-10-03T13:26:44.402083+00:00

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen 2026-10-03T13:26:44.402098+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.