https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:59:45.025440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-021 DRUPAL-CONTRIB-2026-021 2026-10-06T05:59:45.029136+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/file_access_fix

This module moves files to and from private storage depending on the access of its owning entities.

The module does not always validate the access logic correctly, resulting in files attached to an entity not being protected in certain circumstances.

This vulnerability is mitigated by the fact that saving an entity a second time resolves the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-277835 EUVD-2026-277835 2026-10-06T05:59:45.029194+00:00 EUVD-2026-277835 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3526 fkie_cve-2026-3526 2026-10-06T05:59:45.029212+00:00

Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.

 https://cve.radiocsirt.org/vuln/ghsa-9pv3-cpwf-mpmj GHSA-9pv3-cpwf-mpmj 2026-10-06T05:59:45.029236+00:00

Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0599 WID-SEC-W-2026-0599 — Drupal Extensions: Mehrere Schwachstellen 2026-10-06T05:59:45.029253+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal-Erweiterungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.