Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96366
NONE
EPSS 0.20%
Updated Oct 22, 2026
Drupal
CVE Details
CVE ID
CVE-2026-96366
Published Date
Oct 22, 2026
Vendor
Drupal
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.20%
Likelihood of exploitation in next 30 days
Percentile:
8.8th percentile (higher than 8.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory