https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:30:07.777940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277745 EUVD-2026-277745 2026-10-15T03:30:07.837542+00:00 EUVD-2026-277745 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0748 fkie_cve-2026-0748 2026-10-15T03:30:07.837589+00:00

In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls and discloses unpublished node titles and IDs.

Exploit affects versions 7.x-1.0 up to and including 7.x-1.35.

 https://cve.radiocsirt.org/vuln/ghsa-qwjq-cprg-rrcp GHSA-qwjq-cprg-rrcp 2026-10-15T03:30:07.837638+00:00

In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls and discloses unpublished node titles and IDs.

Exploit affects versions 7.x-1.0 up to and including 7.x-1.35.