CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,603 CVEs published, 309 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,603
Show in the list
Critical, last 7 days
309
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product drupal:webform. Show all products

20 CVEs, showing 1 to 20
CVESeverityTitlePublished
CVE-2026-96355Not yet scoredWebform - Critical - Remote Code Execution - SA-CONTRIB-2026-175
Assigned by drupal
Oct 22, 2026
CVE-2026-96356Not yet scoredWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-174
Assigned by drupal
Oct 22, 2026
CVE-2026-96398Not yet scoredWebform - Less critical - Access bypass - SA-CONTRIB-2026-173
Assigned by drupal
Oct 22, 2026
CVE-2026-96357Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172
Assigned by drupal
Oct 22, 2026
CVE-2026-96364Not yet scoredWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Assigned by drupal
Oct 22, 2026
CVE-2026-96365Not yet scoredWebform - Less critical - Denial of service - SA-CONTRIB-2026-170
Assigned by drupal
Oct 22, 2026
CVE-2026-96366Not yet scoredWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-169
Assigned by drupal
Oct 22, 2026
CVE-2026-96373Not yet scoredWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-168
Assigned by drupal
Oct 22, 2026
CVE-2026-96372Not yet scoredWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Assigned by drupal
Oct 22, 2026
CVE-2026-96371Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Assigned by drupal
Oct 22, 2026
CVE-2026-96369Not yet scoredWebform - Less critical - Access bypass - SA-CONTRIB-2026-165
Assigned by drupal
Oct 22, 2026
CVE-2026-96370Not yet scoredWebform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Assigned by drupal
Oct 22, 2026
CVE-2026-96368Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163
Assigned by drupal
Oct 22, 2026
CVE-2026-96367Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162
Assigned by drupal
Oct 22, 2026
CVE-2026-96363Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161
Assigned by drupal
Oct 22, 2026
CVE-2026-96362Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
Assigned by drupal
Oct 22, 2026
CVE-2026-96359Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
Assigned by drupal
Oct 22, 2026
CVE-2026-96358Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
Assigned by drupal
Oct 22, 2026
CVE-2026-96361Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155
Assigned by drupal
Oct 22, 2026
CVE-2026-96360Not yet scoredWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154
Assigned by drupal
Oct 22, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.