CVE-2026-3214

The Drupal CAPTCHA module is vulnerable to an Authentication Bypass Using an Alternate Path or Channel vulnerability. The root cause is the insufficient invalidation of security tokens under certain scenarios, which allows an attacker to bypass the CAPTCHA on subsequent submissions. To exploit th...