https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:26:01.578517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-038 DRUPAL-CONTRIB-2026-038 2026-10-03T14:26:01.581713+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/basket

The Basket module enables e-commerce and checkout functionality for Drupal sites.

The module does not sufficiently sanitize user-supplied data before passing it to PHP's unserialize().

An attacker can supply a crafted payload and trigger PHP Object Injection. If a viable gadget chain exists in the site codebase or installed dependencies, this can result in arbitrary PHP code execution.

 https://cve.radiocsirt.org/vuln/euvd-2026-336489 EUVD-2026-336489 2026-10-03T14:26:01.581762+00:00 EUVD-2026-336489 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9726 fkie_cve-2026-9726 2026-10-03T14:26:01.581778+00:00

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affects Drupal AlternativeCommerce (Basket) versions: from 0.0.0 to 2.1.17.

 https://cve.radiocsirt.org/vuln/ghsa-ggc6-38jq-q957 GHSA-ggc6-38jq-q957 2026-10-03T14:26:01.581800+00:00

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affects Drupal AlternativeCommerce (Basket) versions: from 0.0.0 to 2.1.17.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1702 WID-SEC-W-2026-1702 — Drupal AlternativeCommerce (Basket): Schwachstelle ermöglicht Codeausführung 2026-10-03T14:26:01.581815+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Drupal-Modul "AlternativeCommerce" (Basket) ausnutzen, um beliebigen Programmcode auszuführen.