CVE-2026-10768

CriticalCVSS 9.8

Published: 10/07/2026(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

A missing authorization vulnerability in Drupal LocalGov Workflows allows forceful browsing. This affects versions from 0.0.0 to 1.6.0.

Risk Assessment

An attacker can gain unauthorized access to features or data, potentially leading to information disclosure or privilege escalation.

Recommendation

Immediately update LocalGov Workflows to version 1.6.1 or later, which includes the fix.

Original NVD description (English source)

Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0.