CVE-2026-16644
CRITICAL NVDCVSS Score
9.1
Severity
CRITICAL
Source
NVD
Published
Aug 25, 2026
Description
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.