Known vulnerabilities in Webform REST

Vendor: imclean
Software: Webform REST
Software CPE: cpe:2.3:a:imclean:webform_rest:*:*:*:*:*:drupal:*:*
Website: https://www.drupal.org/u/imclean
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Webform REST Webform REST is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152222 - Improper Access Control
CVE-2026-96391		 CWE-284 Medium
No
No
 4.2.1 25.09.2026 SB20260925235
SB2026092450
#VU139192 - Improper Access Control
CVE-2026-16644		 CWE-284 Medium
No
No
 4.1.0 23.07.2026 SB2026072322