https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T03:13:10.842775+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1321 certfr-2026-avi-1321 — De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une exécution… 2026-10-31T03:13:10.844893+00:00 certfr-2026-avi-1321 https://db.gcve.eu/vuln/fkie_cve-2026-108514 fkie_cve-2026-108514 2026-10-31T03:13:10.844943+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 10.3.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.

 https://db.gcve.eu/vuln/ghsa-8pmv-83q8-mcx5 GHSA-8pmv-83q8-mcx5 2026-10-31T03:13:10.844977+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 10.3.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.

 https://db.gcve.eu/vuln/ncsc-2026-0438 NCSC-2026-0438 — Kwetsbaarheden verholpen in Drupal Core en modules door Drupal 2026-10-31T03:13:10.844994+00:00 NCSC-2026-0438 https://db.gcve.eu/vuln/wid-sec-w-2026-3968 WID-SEC-W-2026-3968 — Drupal Core, Gin Admin Theme und Entity List: Mehrere Schwachstellen 2026-10-31T03:13:10.845012+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.