Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek. Weiterlesen: Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Intelligence View
⚡ tsecurity.de Intelligence
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warns of Fast Exploitation Risk…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
CVE-2026-70183 | Microsoft ASP.NET Core/Visual Studio race condition (Nessus ID 370204)
11 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-70186 | Microsoft ASP.NET Core/Visual Studio deadlock (Nessus ID 370204) VVulDB Updatesvor 1 Std.CVE-2026-88092 | Microsoft ASP.NET Core Kestrel request smuggling (Nessus ID 370204) VVulDB Updatesvor 1 Std.CVE-2026-70188 | Microsoft ASP.NET Core/Visual Studio response splitting (Nessus ID 370204) VVulDB Updatesvor 1 Std.CVE-2026-70196 | Microsoft ASP.NET Core/Visual Studio resource consumption (Nessus ID 370204) VVulDB Updatesvor 3 Std.CVE-2026-102870 | Microsoft ASP.NET Core/Visual Studio code injection (Nessus ID 370204) VVulDB Updatesvor 3 Std.CVE-2026-58280 | Microsoft .NET/.NET Framework/Visual Studio recursion (Nessus ID 370204)
+5
11 Quellen
CVE-2026-111847 | Kings Plugins MarketKing Plugin up to 2.1.72 on WordPress authorization (EUVD-2026-108030)
10 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-112826 | eLightUp Falcon Plugin up to 2.12.0 on WordPress authorization (EUVD-2026-108032) VVulDB Updatesvor 2 Std.CVE-2026-112843 | WP Chill Strong Testimonials Plugin up to 3.3.14 on WordPress access control (EUVD-2026-108033) VVulDB Updatesvor 1 Std.CVE-2026-114180 | Wpmet Metform Plugin up to 4.3.2 on WordPress access control (EUVD-2026-108031) VVulDB Updatesvor 1 Std.CVE-2026-114175 | DigitalME eRoom Plugin up to 1.7.1 on WordPress authorization (EUVD-2026-108028) VVulDB Updatesvor 1 Std.CVE-2026-112867 | H5P Plugin up to 1.17.9 on WordPress cross site scripting (EUVD-2026-108027) VVulDB Updatesvor 1 Std.CVE-2026-114184 | WPVibes Elementor Addon Elements Plugin up to 1.14.4 on WordPress cross site scripting (EUVD-2026-108026)
+4
7 Quellen
CVE-2026-103634 | Apache DataSketches datasketches-cpp out-of-bounds (EUVD-2026-108025)
6 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-114460 | pbuchbinder mod_qos 11.74/11.76/11.79 off-by-one (EUVD-2026-108024) VVulDB Updatesvor 1 Std.CVE-2026-114458 | pbuchbinder mod_qos 11.74/11.76/11.79 array index (EUVD-2026-108022) VVulDB Updatesvor 1 Std.CVE-2026-114457 | pbuchbinder mod_qos 11.74/11.76/11.79 JSON Body Filtering out-of-bounds (EUVD-2026-108021) VVulDB Updatesvor 1 Std.CVE-2026-114459 | Apache mod_qos out-of-bounds (EUVD-2026-108023) VVulDB Updatesvor 45 Min.CVE-2026-17545 | PHP up to 8.2.33/8.3.34/8.4.25/8.5.10 Filesystem CreateFileW input validation (EUVD-2026-87329 / WID-SEC-2026-3585) VVulDB Updatesvor 2 Std.CVE-2025-1218 | PHP up to 8.2.33/8.3.34/8.4.25/8.5.10 mysqlnd wire protocol parser out-of-bounds (Nessus ID 350695 / WID-SEC-2026-3585)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4282602/sicherheitsluecken-cve/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/