https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:37:09.978052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-067 DRUPAL-CONTRIB-2026-067 2026-10-04T14:37:09.980995+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/flowdrop

This module enables you to test and run AI-driven workflows interactively through a chat interface.

The module doesn't sufficiently enforce permissions on certain endpoints. Attackers may be able to trigger workflow execution (incurring LLM spend and tool side effects) or send messages into other user's sessions.

This vulnerability is mitigated by the fact that an attacker must have the permission "View any session", which is not granted to anonymous or authenticated users by default.

 https://cve.radiocsirt.org/vuln/euvd-2026-336088 EUVD-2026-336088 2026-10-04T14:37:09.981048+00:00 EUVD-2026-336088 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58589 fkie_cve-2026-58589 2026-10-04T14:37:09.981064+00:00

Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0.

 https://cve.radiocsirt.org/vuln/ghsa-wfpx-3cw4-cw3g GHSA-wfpx-3cw4-cw3g 2026-10-04T14:37:09.981085+00:00

Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2181 WID-SEC-W-2026-2181 — Drupal Extensions: Mehrere Schwachstellen 2026-10-04T14:37:09.981099+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.