Live › vulnerability › CVE-2026-96375
Go to dashboardDrupal Cloud does not properly validate certificates, so a network attacker positioned between a client and the service can impersonate the endpoint. The impact on data confidentiality and integrity is not described in detail by the sources.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
The sources list Drupal Cloud versions from 0.0.0 to 7.0.1 as affected, but do not say which deployment paths or configurations are exposed. unknown
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-96375")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.