https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:03:13.095051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00847 bdu:2025-00847 2026-10-09T07:03:13.180154+00:00 bdu:2025-00847 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-020 DRUPAL-CONTRIB-2024-020 2026-10-09T07:03:13.180195+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/email_contact

The Email Contact module provides email field display formatters that can display the field as a link to the contact form, or as an inline contact form.

The module does not sufficiently handle restricted entity or field access to the mail sending form, when the "Email contact link" formatter is used.

This vulnerability is mitigated by the fact that it requires the "Email contact link" formatter to be used.

 https://cve.radiocsirt.org/vuln/euvd-2026-210044 EUVD-2026-210044 2026-10-09T07:03:13.180233+00:00 EUVD-2026-210044 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13256 fkie_cve-2024-13256 2026-10-09T07:03:13.180245+00:00

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4.

 https://cve.radiocsirt.org/vuln/ghsa-xhf8-2ffc-9gh2 GHSA-xhf8-2ffc-9gh2 2026-10-09T07:03:13.180266+00:00

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1220 WID-SEC-W-2024-1220 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-09T07:03:13.180325+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.