https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:08:08 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-055 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/ai</p> <p>This module enables you to utilize an agent to use Drupal core actions tools with bypassed access.</p> <p>Certain Drupal core actions, exposed as agent tools did not have correct access validation, and some core actions were missing associated access-level definitions.</p> <p>This vulnerability is mitigated by the fact that an attacker must have access to communicate with an affected agent, the site must be configured to expose the affected tools to non-privileged users.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/ai</p> <p>This module enables you to utilize an agent to use Drupal core actions tools with bypassed access.</p> <p>Certain Drupal core actions, exposed as agent tools did not have correct access validation, and some core actions were missing associated access-level definitions.</p> <p>This vulnerability is mitigated by the fact that an attacker must have access to communicate with an affected agent, the site must be configured to expose the affected tools to non-privileged users.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-055 https://cve.radiocsirt.org/vuln/euvd-2026-336111 EUVD-2026-336111 https://cve.radiocsirt.org/vuln/euvd-2026-336111 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13235 <p>Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.</p> <p>Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13235 https://cve.radiocsirt.org/vuln/ghsa-4c7f-qhrm-6jc8 <p>Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.</p> <p>Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.</p> https://cve.radiocsirt.org/vuln/ghsa-4c7f-qhrm-6jc8 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2080