Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.
CVE-2026-118582
NONE
EPSS 0.18%
Updated Oct 30, 2026
Drupal
CVE Details
CVE ID
CVE-2026-118582
Published Date
Oct 30, 2026
Vendor
Drupal
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.18%
Likelihood of exploitation in next 30 days
Percentile:
7.8th percentile (higher than 7.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory