https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:07:08.608101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-108 DRUPAL-CONTRIB-2026-108 2026-10-04T04:07:08.702629+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/datafield

This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.

The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.

 https://cve.radiocsirt.org/vuln/euvd-2026-363303 EUVD-2026-363303 2026-10-04T04:07:08.702720+00:00 EUVD-2026-363303 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81269 fkie_cve-2026-81269 2026-10-04T04:07:08.702744+00:00

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

 https://cve.radiocsirt.org/vuln/ghsa-rq35-w8f7-p43g GHSA-rq35-w8f7-p43g 2026-10-04T04:07:08.702779+00:00

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3041 WID-SEC-W-2026-3041 — Drupal Extensions: Mehrere Schwachstellen 2026-10-04T04:07:08.702804+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.