3.7
CVE-2026-81168
- EPSS 0.34%
- Veröffentlicht 02.09.2026 12:32:13
- Zuletzt bearbeitet 09.09.2026 18:53:36
- Erkennungen
LoginCAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Captcha Protected Page Project ≫ Captcha Protected Page SwPlatform drupal Version < 1.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.263 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 3.7 | 2.2 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-288 Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
https://www.drupal.org/sa-contrib-2026-105