Mmastodon TechnologyCybersecurity first seen 15 d ago, last 15 d ago, peak #6

CSRF vulnerability reported in Drupal Tawk.to live chat module

Original: 🚨 EUVD-2026-107817 📊 Score: n/a 📦 Product: Tawk.to - Live chat application 🏢 Vendor: Drupal 📅 Updated: 2026-10-22 📝 Cros

A cross-site request forgery vulnerability, tracked as EUVD-2026-107817, has been recorded for the Tawk.to live chat application module associated with Drupal. The flaw allows attackers to forge requests on behalf of authenticated users, potentially compromising sites that use the popular chat integration. No severity score has been published yet; administrators are advised to watch for a patched release.

Why now: Security teams monitoring new vulnerability disclosures are flagging the advisory as a warning for sites running the widely used Tawk.to chat integration.

DrupalTawk.toEUVD

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 15 d ago to 15 d ago.

Evidence

• 🚨 EUVD-2026-107817 📊 Score: n/a 📦 Product: Tawk.to - Live chat application 🏢 Vendor: Drupal 📅 Updated: 2026-10-22 📝 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forgery. This issue affects Tawk.to - Live… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3189358