Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-96375 DRUPAL-CONTRIB-2026-176EUVD-2026-107825GHSA-cxrv-m5j5-pwvm

Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.

Affected products

VendorProductAffectedFixed
Drupal Cloud 0.0.0 – < 7.0.1 7.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/cloud < 7.0.1 7.0.1 DRUPAL-CONTRIB-2026-176

Advisories 1

References