Veille CVE

Jeudi 22 octobre 2026

3 CVE sur 22

Critique 1 Élevée 1 Moyenne 15 Faible 3 Non évaluée 2 Exploitées (KEV) Tri : plus récentes « Drupal Webform » ✕
  1. CVE-2026-96373 3.3 Faible

    Drupal Webform

    Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  2. CVE-2026-96369 3.1 Faible

    Drupal Webform

    Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  3. CVE-2026-96360 3.5 Faible

    Drupal Webform

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.