https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:06:31.777732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07318 bdu:2026-07318 2026-10-02T15:06:31.781845+00:00 bdu:2026-07318 https://cve.radiocsirt.org/vuln/bit-drupal-2026-6367 BIT-drupal-2026-6367 — Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 2026-10-02T15:06:31.781875+00:00

Affected: Bitnami: drupal

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 11.3.0 before 11.3.7.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0447 certfr-2026-avi-0447 — De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une exécution… 2026-10-02T15:06:31.781908+00:00 certfr-2026-avi-0447 https://cve.radiocsirt.org/vuln/euvd-2026-328909 EUVD-2026-328909 2026-10-02T15:06:31.781925+00:00 EUVD-2026-328909 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6367 fkie_cve-2026-6367 2026-10-02T15:06:31.781937+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 11.3.0 before 11.3.7.

 https://cve.radiocsirt.org/vuln/ghsa-pw6f-3999-xp7g GHSA-pw6f-3999-xp7g — Drupal core allows Cross-Site Scripting (XSS) 2026-10-02T15:06:31.781959+00:00

Affected: Packagist: drupal/core

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 11.3.0 before 11.3.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1151 WID-SEC-W-2026-1151 — Drupal Core: Mehrere Schwachstellen 2026-10-02T15:06:31.781979+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.