https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T00:02:33.068199+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-18554 bdu:2026-18554 2026-11-10T00:02:33.079236+00:00 bdu:2026-18554 https://db.gcve.eu/vuln/drupal-contrib-2026-218 DRUPAL-CONTRIB-2026-218 2026-11-10T00:02:33.079269+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/entity_list

The Entity List module provides a way to create lists of entities without Views.

The module has a remote code execution vulnerability.

The vulnerability is not directly exploitable with the module alone, but multiple serious exploit paths exist with other contributed modules. At least one known exploit path does not require authentication. Custom code may also expose the vulnerable functionality.

 https://db.gcve.eu/vuln/fkie_cve-2026-108099 fkie_cve-2026-108099 2026-11-10T00:02:33.079306+00:00

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.

 https://db.gcve.eu/vuln/ghsa-9xvr-v24x-c9rf GHSA-9xvr-v24x-c9rf 2026-11-10T00:02:33.079328+00:00

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.

 https://db.gcve.eu/vuln/ncsc-2026-0438 NCSC-2026-0438 — Kwetsbaarheden verholpen in Drupal Core en modules door Drupal 2026-11-10T00:02:33.079341+00:00 NCSC-2026-0438 https://db.gcve.eu/vuln/wid-sec-w-2026-3968 WID-SEC-W-2026-3968 — Drupal Core, Gin Admin Theme und Entity List: Mehrere Schwachstellen 2026-11-10T00:02:33.079358+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.