Security Advisory

CVE-2026-10768

9.8
CRITICAL

Vulnerability Description

Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0.
Published Date July 10, 2026
Official Source NIST NVD Advisory