https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:52:52.908075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-126 DRUPAL-CONTRIB-2025-126 2026-10-07T21:52:52.911299+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/http_client_manager

Http Client Manager introduces a new Guzzle based plugin which allows you to manage HTTP clients using Guzzle Service Descriptions via YAML, JSON or PHP files, in a simple and efficient way. The modules allows administrators to configure HTTP requests as part of Event Condition Action (ECA) automation.

The module does not sufficiently maintain separation of data from request operations, potentially leading to information disclosure in very uncommon situations.

 https://cve.radiocsirt.org/vuln/euvd-2026-266907 EUVD-2026-266907 2026-10-07T21:52:52.911360+00:00 EUVD-2026-266907 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14840 fkie_cve-2025-14840 2026-10-07T21:52:52.911376+00:00

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-wmp3-phmx-x8q8 GHSA-wmp3-phmx-x8q8 2026-10-07T21:52:52.911399+00:00

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2872 WID-SEC-W-2025-2872 — Drupal HTTP Client Manager: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-07T21:52:52.911413+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Drupal HTTP Client Manager ausnutzen, um Informationen offenzulegen.