https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T20:52:25.751288+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-121 DRUPAL-CONTRIB-2026-121 2026-10-22T20:52:25.761649+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/ai_translate

This module enables you to automatically translate entities.

The module doesn't sufficiently check access on the entity to be translated, related fields or referenced entities when performing an AI translation on an entity or when those fields / entities have a different access level than the parent entity. This permission bypass is only applicable to the translate operation - no unwarranted read or update access is granted to the affected entities

 https://db.gcve.eu/vuln/fkie_cve-2026-84913 fkie_cve-2026-84913 2026-10-22T20:52:25.761714+00:00

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.

 https://db.gcve.eu/vuln/ghsa-q2j4-w9mx-9w5r GHSA-q2j4-w9mx-9w5r 2026-10-22T20:52:25.761742+00:00

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3168 WID-SEC-W-2026-3168 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-22T20:52:25.761757+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.