https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:20:33.546454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-061 DRUPAL-CONTRIB-2026-061 2026-10-04T03:20:33.614132+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/paragraphs

The optional Paragraphs Library module allows the reuse of paragraphs in multiple places. The module doesn't sufficiently restrict access to direct child paragraphs of library items through API endpoints. This vulnerability is mitigated by the fact the paragraphs\_library module must be in use and general write access to paragraphs through another module must be allowed.

 https://cve.radiocsirt.org/vuln/euvd-2026-336103 EUVD-2026-336103 2026-10-04T03:20:33.614183+00:00 EUVD-2026-336103 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13241 fkie_cve-2026-13241 2026-10-04T03:20:33.614199+00:00

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0.

 https://cve.radiocsirt.org/vuln/ghsa-83x2-c529-vx4j GHSA-83x2-c529-vx4j 2026-10-04T03:20:33.614221+00:00

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen 2026-10-04T03:20:33.614236+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.