https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:00:11.287695+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-022 DRUPAL-CONTRIB-2026-022 2026-10-06T06:00:11.290983+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/ajax_dashboard

AJAX Dashboard: Entity Dashboards enables you to create configurable dashboards attached to entities which include AJAX-reloading of a main content area based on inputs from a configurable set of buttons.

The module doesn't sufficiently check access on the dashboard configuration route. Unauthorized users could access the entity dashboard configuration page and either enable or disable dashboards. The affected administration page does not permit editing the configurations of the dashboards themselves.

The vulnerability is mitigated by the fact that the AJAX Dashboard Entity Dashboard submodule must be enabled.

 https://cve.radiocsirt.org/vuln/euvd-2026-277834 EUVD-2026-277834 2026-10-06T06:00:11.291040+00:00 EUVD-2026-277834 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3527 fkie_cve-2026-3527 2026-10-06T06:00:11.291057+00:00

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-c3p6-9m4j-2c45 GHSA-c3p6-9m4j-2c45 2026-10-06T06:00:11.291079+00:00

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0599 WID-SEC-W-2026-0599 — Drupal Extensions: Mehrere Schwachstellen 2026-10-06T06:00:11.291094+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal-Erweiterungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.