Drupal Webform vulnerabilities

• drupal webform rest Webform REST - Less critical - Access bypass - SA-CONTRIB-2026-186 CVE-2026-96391 Fix available 4.3 MediumSeptember 23, 2026
• drupal webform Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175 CVE-2026-96355 Fix available 9.1 CriticalSeptember 23, 2026
• drupal webform Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174 CVE-2026-96356 Fix available 5.3 MediumSeptember 23, 2026
• drupal webform Webform - Less critical - Access bypass - SA-CONTRIB-2026-173 CVE-2026-96398 Fix available 4.3 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172 CVE-2026-96357 Fix available 4.6 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171 CVE-2026-96364 Fix available 5.3 MediumSeptember 23, 2026
• drupal webform Webform - Less critical - Denial of service - SA-CONTRIB-2026-170 CVE-2026-96365 Fix available 7.5 HighSeptember 23, 2026
• drupal webform Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169 CVE-2026-96366 Fix available 5.3 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168 CVE-2026-96373 Fix available 3.3 LowSeptember 23, 2026
• drupal webform Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167 CVE-2026-96372 Fix available 5.4 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166 CVE-2026-96371 Fix available 5.4 MediumSeptember 23, 2026
• drupal webform Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 CVE-2026-96369 Fix available 3.1 LowSeptember 23, 2026
• drupal webform Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164 CVE-2026-96370 Fix available 5.4 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163 CVE-2026-96368 Fix available 4.6 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162 CVE-2026-96367 Fix available 4.6 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161 CVE-2026-96363 Fix available 3.1 LowSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160 CVE-2026-96362 Fix available 4.2 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159 CVE-2026-96359 Fix available 4.6 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158 CVE-2026-96358 Fix available 4.6 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155 CVE-2026-96361 Fix available 4.6 MediumSeptember 23, 2026
• drupal webform Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154 CVE-2026-96360 Fix available 3.5 LowSeptember 23, 2026
• drupal webform submissions delete Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133 CVE-2026-84921 Fix available 5.3 MediumSeptember 2, 2026
• drupal webform rest Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087 CVE-2026-16644 Fix available 9.1 CriticalJuly 22, 2026
• drupal webform module Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1... CVE-2008-1794 4.3 MediumApril 15, 2008