{"id":"CVE-2026-81168","aliases":["DRUPAL-CONTRIB-2026-105","EUVD-2026-70006","GHSA-cxh2-vw8f-xmvf"],"status":"published","title":"CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00319,"percentile":0.25166,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-288"],"published":"2026-08-26T17:34:35Z","modified":"2026-10-28T02:30:36Z","fixes":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/captcha_protected_page","fixed_in":["1.0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/captcha_protected_page","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}]}],"products":[{"vendor":"captcha_protected_page_project","product":"captcha_protected_page"},{"vendor":"drupal","product":"captcha protected page"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-105","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81168","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cxh2-vw8f-xmvf"},{"url":"https://git.drupalcode.org/project/captcha_protected_page","tags":["web"]},{"url":"https://www.drupal.org/project/captcha_protected_page","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81168.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-81168","title":"CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.","status":"published","published":"2026-09-02T12:32:13.52Z","modified":"2026-09-02T18:58:41.547Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T13:36:29.327819Z"}],"euvd":[{"id":"EUVD-2026-70006","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.","status":"published","published":"2026-09-02T12:32:13Z","modified":"2026-09-02T18:58:41Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T18:01:14.689075Z"}],"ghsa":[{"id":"GHSA-cxh2-vw8f-xmvf","title":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA...","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.","status":"published","published":"2026-09-02T15:34:47Z","modified":"2026-09-02T21:33:10Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T15:11:18.49317Z"}],"nvd":[{"id":"CVE-2026-81168","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.","status":"published","published":"2026-09-02T13:18:12.58Z","modified":"2026-09-09T18:53:36.033Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:12:43.399612Z"}],"osv":[{"id":"CVE-2026-81168","title":"CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.","status":"published","published":"2026-09-02T12:32:13.52Z","modified":"2026-10-28T02:30:36.057359878Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T15:45:18.131258Z"},{"id":"DRUPAL-CONTRIB-2026-105","description":"This module enables site administrators to require CAPTCHA confirmation on specific pages.\n\nThe module does not sufficiently validate its CAPTCHA verification cookies. Under certain circumstances, an unauthenticated user or automated bot can forge the cookie and bypass CAPTCHA verification entirely.","status":"published","published":"2026-08-26T17:34:35Z","modified":"2026-08-26T22:41:58.195278Z","updated_at":"2026-11-02T15:46:13.900249Z"}]}}