https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T18:30:38.786408+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-241 DRUPAL-CONTRIB-2026-241 2026-10-30T18:30:38.808019+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/frontend_editing

This module enables editors to edit content, including paragraphs, directly on the rendered page.

The module doesn't sufficiently check field access permissions when editing, deleting or adding paragraph items to entity reference revisions fields.

This vulnerability is mitigated by the fact that an attacker must have a role with the permissions "access frontend editing", "add paragraphs"/"edit paragraphs"/"delete paragraphs" and also have access to update the parent entity the field belongs to.

 https://db.gcve.eu/vuln/fkie_cve-2026-114553 fkie_cve-2026-114553 2026-10-30T18:30:38.808099+00:00

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

 https://db.gcve.eu/vuln/ghsa-62hx-4jm7-723g GHSA-62hx-4jm7-723g 2026-10-30T18:30:38.808128+00:00

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 WID-SEC-W-2026-4230 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-30T18:30:38.808143+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.