CVE-2026-96375: Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176

Q: Which Drupal Cloud deployments are affected?

Drupal Cloud versions from 0.0.0 through 7.0.1 are affected.

Q: What would an attacker need to exploit this issue?

An attacker would need to be in a position to act as an adversary in the middle of the affected certificate validation flow.

Published Oct 22, 2026

Updated

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.

Affected Software

1 affected component

Drupal Cloud>=0.0.0<=7.0.1

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which Drupal Cloud deployments are affected?

Drupal Cloud versions from 0.0.0 through 7.0.1 are affected.

What would an attacker need to exploit this issue?

An attacker would need to be in a position to act as an adversary in the middle of the affected certificate validation flow.

CVE-2026-96375: Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176

Affected Software

Event History

Frequently Asked Questions

Which Drupal Cloud deployments are affected?

What would an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which Drupal Cloud deployments are affected?

What would an attacker need to exploit this issue?