Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-96364 DRUPAL-CONTRIB-2026-171EUVD-2026-107830GHSA-m769-crqj-8pp9

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

Affected products

VendorProductAffectedFixed
Drupal Webform 0.0.0 – < 6.2.12, 6.3.0 – < 6.3.1 6.2.12

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/webform < 6.2.12 · >= 6.3.0, < 6.3.1 6.2.12, 6.3.1 DRUPAL-CONTRIB-2026-171

Advisories 1

References