https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:14:47.049386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-006 DRUPAL-CONTRIB-2026-006 2026-10-04T06:14:47.053890+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/canvas

This Drupal Canvas module is a new visual page builder for Drupal. You can create reusable components that match your design system, drag them onto a page, edit content in place, preview changes across multiple pages, and undo mistakes with ease.

The module doesn't sufficiently validate access to Canvas Pages when they are unpublished.

This vulnerability is mitigated by the fact that Canvas Pages don't have content moderation enabled by default, and they must be unpublished after being released, and archiving is not a feature provided by the module yet.

 https://cve.radiocsirt.org/vuln/euvd-2026-267407 EUVD-2026-267407 2026-10-04T06:14:47.053982+00:00 EUVD-2026-267407 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1553 fkie_cve-2026-1553 2026-10-04T06:14:47.054013+00:00

Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.

 https://cve.radiocsirt.org/vuln/ghsa-mv4x-xj43-wwww GHSA-mv4x-xj43-wwww 2026-10-04T06:14:47.054058+00:00

Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0250 WID-SEC-W-2026-0250 — Drupal Canvas und CAS: Mehrere Schwachstellen 2026-10-04T06:14:47.054088+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Daten zu manipulieren.