<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 12:48:47 +0000</lastBuildDate>
    <item>
      <title>DRUPAL-CONTRIB-2026-008</title>
      <link>https://cve.radiocsirt.org/vuln/drupal-contrib-2026-008</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist:https://packages.drupal.org/8: drupal/login_disable&lt;/p&gt;
&lt;p&gt;The Login Disable module prevents users from logging in to your Drupal site unless they know the access key to add to the end of the login form page.  
( default: &amp;lt;http://example.com/user/login?admin&amp;gt; )  
If they provide the access key and have a specific role they can log in.&lt;/p&gt;
&lt;p&gt;The module does not check for the access key when using the HTTP request login route. It is possible to use this route to log in without providing the access key.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist:https://packages.drupal.org/8: drupal/login_disable&lt;/p&gt;
&lt;p&gt;The Login Disable module prevents users from logging in to your Drupal site unless they know the access key to add to the end of the login form page.  
( default: &amp;lt;http://example.com/user/login?admin&amp;gt; )  
If they provide the access key and have a specific role they can log in.&lt;/p&gt;
&lt;p&gt;The module does not check for the access key when using the HTTP request login route. It is possible to use this route to log in without providing the access key.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/drupal-contrib-2026-008</guid>
    </item>
    <item>
      <title>EUVD-2026-277538</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-277538</link>
      <description>EUVD-2026-277538</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-277538</guid>
    </item>
    <item>
      <title>fkie_cve-2026-1917</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2026-1917</link>
      <description>&lt;p&gt;Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2026-1917</guid>
    </item>
    <item>
      <title>GHSA-j568-7wm8-fm52</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-j568-7wm8-fm52</link>
      <description>&lt;p&gt;Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-j568-7wm8-fm52</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-0312 — Drupal (Login Disable): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0312</link>
      <description>&lt;p&gt;Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Drupal im  Modul ausnutzen, um Sicherheitsvorkehrungen zu umgehen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Drupal im  Modul ausnutzen, um Sicherheitsvorkehrungen zu umgehen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0312</guid>
    </item>
  </channel>
</rss>
