https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T10:28:31.732281+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-08686 cnvd-2016-08686 2026-10-23T10:28:31.794022+00:00 cnvd-2016-08686 https://cve.radiocsirt.org/vuln/euvd-2026-86732 EUVD-2026-86732 2026-10-23T10:28:31.794068+00:00 EUVD-2026-86732 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7570 fkie_cve-2016-7570 2026-10-23T10:28:31.794097+00:00

Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.

 https://cve.radiocsirt.org/vuln/ghsa-6g9h-6v79-w4pc GHSA-6g9h-6v79-w4pc — Drupal Users without "Administer comments" can set comment visibility on nodes they can edit 2026-10-23T10:28:31.794133+00:00

Affected: Packagist: drupal/drupal, Packagist: drupal/core

Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.

 https://cve.radiocsirt.org/vuln/gsd-2016-7570 gsd-2016-7570 2026-10-23T10:28:31.794160+00:00 gsd-2016-7570