Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Drupal

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167

SA-CONTRIB-2026-167 Sep 23, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-167. 2 reporter(s), 3 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-contrib-2026-167
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

5 lines
Showing 1–5 of 5
CVE-2026-96372 BR2026-0000-015469 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Credited as Pierre Rudloff (prudloff) of the Drupal Security Team
CVE-2026-96372 BR2026-0000-015470 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Credited as Wesley Giles (seraphdev)
CVE-2026-96372 BR2026-0000-015471 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Credited as Dan Chadwick (danchadwick)
CVE-2026-96372 BR2026-0000-015472 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Credited as Jacob Rockowitz (jrockowitz)
CVE-2026-96372 BR2026-0000-015473 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Credited as Liam Morland (liam morland)