CVE-2026-96372

Published: Ott 22, 2026 Last Modified: Ott 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

1220

Insufficient Granularity of Access Control

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability Access Control
Potential Impacts:
Modify Memory Read Memory Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity Bypass Protection Mechanism Other
Applicable Platforms
All platforms may be affected
View CWE Details
https://www.drupal.org/sa-contrib-2026-167
https://www.drupal.org/sa-contrib-2026-167