🔐 CVE Alert

CVE-2026-84921

UNKNOWN 0.0

Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.

CWE CWE-862
Vendor drupal
Product webform submissions delete
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal webform submissions delete

Be the first to know when new unknown vulnerabilities affecting drupal webform submissions delete are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Webform Submissions Delete
0.0.0 < 1.2.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-133

Credits

Bernhard Karimi (bernhardk_oww) solideogloria Swan Kalata (akalata) Damien McKenna (damienmckenna) Dan Smith (galooph) Greg Knaddison (greggles) Juraj Nemec (poker10) Pierre Rudloff (prudloff)