CVE-2026-96365: Webform - Less critical - Denial of service - SA-CONTRIB-2026-170
Published Oct 22, 2026
·Updated
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
Event History
Oct 22, 2026
CVE Published
via MITRE·01:21 AM
Data Sourced
via MITRE·01:21 AM
DescriptionWeakness
Frequently Asked Questions
1
Which Webform installations are affected?
Affected versions are 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1. The provided information does not identify any affected versions outside those ranges.
2
What is the impact of successful exploitation?
The issue can cause excessive resource allocation, resulting in a denial-of-service condition.