Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #4

Drupal Webform REST module hit by missing authorization flaw

Original: 🚨 EUVD-2026-107815 📊 Score: n/a 📦 Product: Webform REST 🏢 Vendor: Drupal 📅 Updated: 2026-10-22 📝 Missing Authorization v

A new vulnerability, EUVD-2026-107815, has been disclosed in Drupal's Webform REST module. The missing authorization flaw allows forceful browsing, letting attackers access resources without proper permission checks. All versions from 0.0.0 through 4.2.1 are affected. No severity score has been assigned yet, but security teams running the module are expected to review and patch their sites.

Why now: Security trackers and admins circulate new Drupal vulnerability advisories so affected sites can patch quickly.

DrupalWebform RESTEUVD-2026-107815

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107815 📊 Score: n/a 📦 Product: Webform REST 🏢 Vendor: Drupal 📅 Updated: 2026-10-22 📝 Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1. 🔗 https://… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3189356