CVE-2026-96370 | Drupal Webform Module up to 6.2.11/6.3.0 server-side request forgery

October 22, 2026 Yanac

A vulnerability labeled as critical has been found in Drupal Webform Module up to 6.2.11/6.3.0. Affected by this issue is some unknown functionality. Such manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-96370. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More