https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T04:44:56.813796+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-031 DRUPAL-CONTRIB-2025-031 2026-10-16T04:44:56.817984+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/eca

This module enables you to define automations on your Drupal site.

The module doesn't sufficiently protect certain routes from CSRF attacks.

This vulnerability can be mitigated by disabling the "eca\_ui" submodule, which leaves ECA functionality intact, but the vulnerable routes will no longer be available.

 https://cve.radiocsirt.org/vuln/euvd-2026-228084 EUVD-2026-228084 2026-10-16T04:44:56.818033+00:00 EUVD-2026-228084 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3131 fkie_cve-2025-3131 2026-10-16T04:44:56.818050+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2.*.

 https://cve.radiocsirt.org/vuln/ghsa-fgg8-rprm-rg7v GHSA-fgg8-rprm-rg7v 2026-10-16T04:44:56.818073+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2.*.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0783 WID-SEC-W-2025-0783 — Drupal: Mehrere Schwachstellen 2026-10-16T04:44:56.818089+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service durchzuführen