Skip to content
OpenAdvisories

Product · Drupal

Webform REST

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-16644

    Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087

    Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.

    Drupal Webform REST drupal/webform_rest Packagist