CVE-2026-81168
CVE-2026-81168 · CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.
CVSS 3.7 · Low · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
captcha protected page
- Versions
- ≥ 0.0.0, < 1.0.2: Affected (semver)
Update to 1.0.2
drupal/captcha_protected_page Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.2
Update to 1.0.2