PT-2026-107753

CVE-2026-107262

Published

2026-10-07

Updated

2026-10-30

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Advanced Filesystem versions 0.0.0 through 1.0.28

Description The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests, leading to a Cross-Site Request Forgery (CSRF) issue. This allows an attacker to trick an authenticated user into performing unintended actions. This issue is only present if the advanced filesystem backup module is enabled.

Recommendations Update Drupal Advanced Filesystem to a version later than 1.0.28. As a temporary mitigation, disable the advanced filesystem backup module.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration