CVE-2026-81168

3.7 lowEPSS 0.3%

Low (3.7) in captcha protected page project captcha protected page. EPSS 0.3% chance of exploitation in the next 30 days.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.

Severity

CVSS 3.1

3.7 low

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-288
Published: 2026-09-02
Modified: 2026-09-09
Record from: the NVD, synced 2026-10-19

Affected

captcha_protected_page_project:captcha_protected_page

References

https://www.drupal.org/sa-contrib-2026-105

Check your stack JSON