https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:55:31.836554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-060 DRUPAL-CONTRIB-2026-060 2026-10-04T11:55:31.839720+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/paragraphs

The optional Paragraphs Library module allows the reuse of paragraphs in multiple places. The module doesn't sufficiently restrict access to unpublished library items in lists. This vulnerability is mitigated by the fact the paragraphs\_library module must be in use, and that an attacker must have access to a list of library items, such as a field with autocomplete suggestions or a view.

 https://cve.radiocsirt.org/vuln/euvd-2026-336102 EUVD-2026-336102 2026-10-04T11:55:31.839767+00:00 EUVD-2026-336102 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13240 fkie_cve-2026-13240 2026-10-04T11:55:31.839783+00:00

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0.

 https://cve.radiocsirt.org/vuln/ghsa-mcg9-jw6g-vx5q GHSA-mcg9-jw6g-vx5q 2026-10-04T11:55:31.839806+00:00

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen 2026-10-04T11:55:31.839820+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.