CVE-2026-118582

Vulnerability Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.

Related Weaknesses (CWE)

CWE-288

References

https://www.drupal.org/sa-contrib-2026-281

FAQ

What is CVE-2026-118582?

CVE-2026-118582 is a documented vulnerability. Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.

How severe is CVE-2026-118582?

CVSS scoring is not yet available for CVE-2026-118582. Check NVD for updates.

Is there a patch for CVE-2026-118582?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.