CVE-2026-107262

Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...

CVE-2026-107262 Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...

EUVD-2026-113558

Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...

CVE-2026-107262

The Advanced Filesystem module for Drupal is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-107262) in versions 0.0.0 to 1.0.28 . The root cause is that the Advanced Filesystem: Backup submodule fails to sufficiently validate certain requests. An attacker could trick an a...