https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T02:22:03.687799+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-174 DRUPAL-CONTRIB-2026-174 2026-10-23T02:22:03.713941+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/webform

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.

Webform did not sufficiently guard user-specific access rules against a malformed saved configuration. Under certain site-specific conditions, an access rule intended to grant submission access only to selected user accounts could also grant access to anonymous users.

This vulnerability is mitigated by the fact that the bypass depends on malformed saved access-rule configuration.

 https://db.gcve.eu/vuln/fkie_cve-2026-96356 fkie_cve-2026-96356 2026-10-23T02:22:03.714106+00:00

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

 https://db.gcve.eu/vuln/ghsa-3f83-v278-97qj GHSA-3f83-v278-97qj 2026-10-23T02:22:03.714139+00:00

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3554 WID-SEC-W-2026-3554 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-23T02:22:03.714159+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.