Advisories · Technology

Drupal CAPTCHA.

Every CVE that names Drupal CAPTCHA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118582 CVE record

CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281
- Drupal CAPTCHA
- Authentication bypass
Not analysed yet 30 Oct 2026
CVE-2026-3214 CVE record

CVSS 6.5 Medium

CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015
- Drupal CAPTCHA
- Authentication bypass
Not analysed yet 25 Mar 2026