CVE-2026-107262

CVE-2026-107262 · DRUPAL-CONTRIB-2026-217

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery (CSRF) vulnerability. The vulnerability is mitigated by the fact that `advanced_filesystem_backup` module must be enabled.

Fix available

Published

2026-10-07T16:58:12Z

Updated

2026-10-07T20:15:05.735614565Z

Stack: php

Check your server →