← CVE Intelligence

CVE-2026-16644

Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087 PUBLISHED

Description (CNA)

Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.

Affected (CNA)

Vendor / productVersions
Drupal / Webform RESTaffected 0.0.0 before 4.1.0

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.