Critical Security Vulnerabilities Uncovered in Multiple Drupal Modules
Sourced from 1 publication
- •CVE-2026-96398 and CVE-2026-96370 in Drupal Webform module highlight critical risks of improper authorization and server-side request forgery.
- •CVE-2026-96386 affects Drupal Smart Content module up to version 3.2.0, posing improper authorization risks.
- •CVE-2026-96391 found in Drupal Webform REST module leads to critical improper authorization vulnerabilities.
- •CVE-2026-96385 concerning Drupal REST & JSON API Authentication module highlights critical improper authentication risks.
Sources
CVE-2026-96398 | Drupal Webform up to 6.2.11/6.3.0 improper authorization
Vuldb
CVE-2026-96386 | Drupal Smart Content up to 3.2.0 improper authorization
Vuldb
CVE-2026-96391 | Drupal Webform REST up to 4.2.0 improper authorization
Vuldb
CVE-2026-96385 | Drupal REST & JSON API Authentication up to 3.1.x improper auth...
Vuldb
CVE-2026-96370 | Drupal Webform Module up to 6.2.11/6.3.0 server-side request fo...
Vuldb
CVE-2026-96371 | Drupal Webform up to 6.2.11/6.3.0 cross site scripting
Vuldb
CVE-2026-84921 Drupal Webform Submissions Delete Plugin improper authorization
Vuldb
Curated from 1 sources. Every summary is reviewed for accuracy, but may still contain errors. We always link to original sources for verification.
Related Stories
About Meridian
Meridian is a free daily newsletter delivering signal-scored news stories with forward-looking analysis every morning. Stories are scored across six criteria (global leverage, capital impact, temporal durability, career relevance, decision utility, and narrative clarity) then assigned to Big Signal, Core, or Quick tiers.
Get Meridian in your inbox
The stories that matter, every morning at 06:00.