https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T16:31:09.552874+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-186 DRUPAL-CONTRIB-2026-186 2026-10-22T16:31:09.579019+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/webform_rest

This module enables you to retrieve and submit webforms via REST.

The module doesn't sufficiently check permission to webform and webform submission entities when retrieving webform elements or fields.

 https://db.gcve.eu/vuln/fkie_cve-2026-96391 fkie_cve-2026-96391 2026-10-22T16:31:09.579098+00:00

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.

 https://db.gcve.eu/vuln/ghsa-pp56-wg7c-j5hh GHSA-pp56-wg7c-j5hh 2026-10-22T16:31:09.579143+00:00

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3554 WID-SEC-W-2026-3554 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-22T16:31:09.579164+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.