SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-16644

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects versions from 0.0.0 to 4.1.0.

Risk Assessment

An attacker may access form submission data, potentially compromising information confidentiality.

Recommendation

Update the Webform REST module to a version that includes the security fix.

Other vulnerabilities in Drupal Webform REST

Original NVD description (English source)

Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS