NetSight
unscored

CVE-2026-118582

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.

Impact

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.

Affected products

VendorProductAffected versions
DrupalCaptcha
from 2.0.0 before 2.0.11
from 0.0.0 before 1.18.0

Weakness classification

References