Drupal
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
SA-CONTRIB-2026-164 Sep 23, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-164. 4 reporter(s), 2 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-contrib-2026-164
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2026-96370
BR2026-0000-015484
unclaimed
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Credited as abdo.boutanos@richemont.com
CVE-2026-96370
BR2026-0000-015485
unclaimed
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Credited as chulhan park (cjfgks1230)
CVE-2026-96370
BR2026-0000-015486
unclaimed
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Credited as Abdulhakeem Onipede (kism37)
CVE-2026-96370
BR2026-0000-015487
unclaimed
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Credited as Marcus Johansson (marcus_johansson)
CVE-2026-96370
BR2026-0000-015488
unclaimed
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Credited as Jacob Rockowitz (jrockowitz)