PT-2026-97667

CVE-2026-96375

Published

2026-09-23

Updated

2026-10-22

Description by

CVSS 3.1

4.8

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Cloud versions 0.0.0 through 7.0.1

Description Improper certificate validation in the Kubernetes and VMware integrations allows an Adversary in the Middle (AiTM) attack. The module fails to properly validate TLS certificates when connecting to remote API endpoints, which may enable an attacker to intercept connections and obtain secret tokens or other credentials, potentially leading to unauthorized access to the connected infrastructure.

Recommendations Update Drupal Cloud to a version later than 7.0.1.

Exploitability

Exploit

Fix

Impacts

Researchers