Veille CyberInfra — Veille cybersecurite : Japanese furniture giant Nitori says hackers stole 37.6M customer records Veille CyberInfra — Veille cybersecurite : N-able releases security hotfixes for zero-day vulnerabilities Veille CyberInfra — Veille cybersecurite : Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons Veille CyberInfra — Veille cybersecurite : Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Veille CyberInfra — Veille cybersecurite : Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Veille CyberInfra — Veille cybersecurite : Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Veille CyberInfra — Veille cybersecurite : Japanese furniture giant Nitori says hackers stole 37.6M customer records Veille CyberInfra — Veille cybersecurite : N-able releases security hotfixes for zero-day vulnerabilities Veille CyberInfra — Veille cybersecurite : Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons Veille CyberInfra — Veille cybersecurite : Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Veille CyberInfra — Veille cybersecurite : Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Veille CyberInfra — Veille cybersecurite : Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Veille cybersecurite : Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

15/10/2026

Source : The Hacker News

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site’s server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19.

An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog