CVE-2026-96391 | Drupal Webform REST up to 4.2.0 improper authorization

October 22, 2026 Yanac

A vulnerability was found in Drupal Webform REST up to 4.2.0. It has been classified as critical. Affected is an unknown function of the component REST. The manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-96391. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More