CVE-2026-96356 | Drupal Webform Plugin up to 6.2.12/6.3.0-6.3.1 improper authorization

October 22, 2026 Yanac

A vulnerability identified as problematic has been detected in Drupal Webform Plugin up to 6.2.12/6.3.0-6.3.1. Impacted is an unknown function. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-96356. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More