Security Advisory

CVE-2026-16644

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-25 22:21:51
Last updated 2026-08-26 18:40:31
Assigner drupal
CVSS score 9.1
State PUBLISHED

Description

Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.

← Browse all CVEs View on cve.org ↗