https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:09:57.812929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-059 DRUPAL-CONTRIB-2026-059 2026-10-04T10:09:57.816554+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/wisski

The module adds support for the mirador viewer in WissKI and enables annotations on images via the mirador viewer.

It does not sufficiently check the submitted parameters via a route and writes these to the session object without further checks, which can lead to Access Bypass.

This vulnerability is mitigated by the fact that it is specific to the wisski\_mirador submodule.

 https://cve.radiocsirt.org/vuln/euvd-2026-336100 EUVD-2026-336100 2026-10-04T10:09:57.816609+00:00 EUVD-2026-336100 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13239 fkie_cve-2026-13239 2026-10-04T10:09:57.816625+00:00

Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0.

 https://cve.radiocsirt.org/vuln/ghsa-8375-8mwf-6r6x GHSA-8375-8mwf-6r6x 2026-10-04T10:09:57.816647+00:00

Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen 2026-10-04T10:09:57.816662+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.