https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:14:16 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-006 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/canvas</p> <p>This Drupal Canvas module is a new visual page builder for Drupal. You can create reusable components that match your design system, drag them onto a page, edit content in place, preview changes across multiple pages, and undo mistakes with ease.</p> <p>The module doesn&#39;t sufficiently validate access to Canvas Pages when they are unpublished.</p> <p>This vulnerability is mitigated by the fact that Canvas Pages don&#39;t have content moderation enabled by default, and they must be unpublished after being released, and archiving is not a feature provided by the module yet.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/canvas</p> <p>This Drupal Canvas module is a new visual page builder for Drupal. You can create reusable components that match your design system, drag them onto a page, edit content in place, preview changes across multiple pages, and undo mistakes with ease.</p> <p>The module doesn&#39;t sufficiently validate access to Canvas Pages when they are unpublished.</p> <p>This vulnerability is mitigated by the fact that Canvas Pages don&#39;t have content moderation enabled by default, and they must be unpublished after being released, and archiving is not a feature provided by the module yet.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-006 https://cve.radiocsirt.org/vuln/euvd-2026-267407 EUVD-2026-267407 https://cve.radiocsirt.org/vuln/euvd-2026-267407 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1553 <p>Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.</p> <p>Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1553 https://cve.radiocsirt.org/vuln/ghsa-mv4x-xj43-wwww <p>Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.</p> <p>Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.</p> https://cve.radiocsirt.org/vuln/ghsa-mv4x-xj43-wwww https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0250 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Daten zu manipulieren.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0250