CVE-2026-96375: Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176
Published Oct 22, 2026
·Updated
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.
Affected Software
1 affected component
Drupal Cloud>=0.0.0<=7.0.1
Event History
Oct 22, 2026
CVE Published
via MITRE·01:21 AM
Data Sourced
via MITRE·01:21 AM
DescriptionWeakness
Data Sourced
via NVD·02:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Drupal Cloud deployments are affected?
Drupal Cloud versions from 0.0.0 through 7.0.1 are affected.
2
What would an attacker need to exploit this issue?
An attacker would need to be in a position to act as an adversary in the middle of the affected certificate validation flow.