CVE-2026-96375
CVE-2026-96375 · Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.
CVSS 4.8 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
cloud
- Versions
- ≥ 0.0.0, < 7.0.1: Affected (semver)
Update to 7.0.1
drupal/cloud Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 7.0.1
Update to 7.0.1