CVE-2026-107262: Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

Published Oct 30, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28.

Event History

Oct 30, 2026

CVE Published

via MITRE·03:09 AM

Data Sourced

via MITRE·03:09 AM

DescriptionWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Drupal sites using Advanced Filesystem versions from 0.0.0 through 1.0.28 are affected.

Does exploitation require an authenticated account or user interaction?

The supplied CVSS vector indicates no attacker privileges and no user interaction are required. The attack vector is network-based and has low attack complexity.

What is the expected security impact?

The supplied CVSS vector indicates an integrity impact only, with no stated confidentiality or availability impact.

CVE-2026-107262: Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

Event History

Frequently Asked Questions

Which installations are affected?

Does exploitation require an authenticated account or user interaction?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploitation require an authenticated account or user interaction?

What is the expected security impact?