Skip to content
Threat Feed
Subscribe

Product

Webform (Versions 0.0.0 to 6.2.12 and 6.3.0 to 6.3.1)

1 brief RSS
critical advisory

Drupal Webform: Code injection via template engine (CVE-2026-96355)

The Drupal Webform module is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability, which allows for Code Injection.

Webform +1 web-application drupal cve-2026-96365
2c