https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T17:34:27.031453+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-253 DRUPAL-CONTRIB-2026-253 2026-10-30T17:34:27.033658+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/monster_menus

This module enables you to create one or more multisites with highly granular page permissions. The included RSS Page submodule allows you to create nodes which aggregate one or more RSS feeds.

When the input of the node creation form is processed, it makes use of PHP's unserialize function. This introduces a PHP object injection vulnerability.

This vulnerability is mitigated by the fact that the RSS Page submodule must be enabled and an attacker must have a role with the permission "RSS Feed: Create new content".

 https://db.gcve.eu/vuln/fkie_cve-2026-114573 fkie_cve-2026-114573 2026-10-30T17:34:27.033737+00:00

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows Object Injection. This issue affects Monster Menus versions: from 0.0.0 to 9.5.6.

 https://db.gcve.eu/vuln/ghsa-cfj7-55hj-3jxj GHSA-cfj7-55hj-3jxj 2026-10-30T17:34:27.033773+00:00

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows Object Injection. This issue affects Monster Menus versions: from 0.0.0 to 9.5.6.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 WID-SEC-W-2026-4230 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-30T17:34:27.033794+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.