CVE Intelligence

Drupal Webform REST vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal Webform REST: 1 record(s), with affected versions and fixes.

CVE-2026-16644 Critical · 9.1 CWE-863 Aug 25, 2026
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.