CVE-2026-18261: Vulnerability in Drupal Powerful Surveys

This vulnerability in Drupal Powerful Surveys is classified under CWE-20, indicating improper input validation. The CVSS 3.1 vector indicates network attack vector, high attack complexity, high privileges required, user interaction required, unchanged scope, and high impact on confidentiality and integrity with no impact on availability. The vulnerability affects all versions of the Powerful Surveys module, but no specific versions or fixes are identified. No vendor advisory or patch information is currently available.

Successful exploitation could lead to unauthorized disclosure and modification of sensitive data within the Drupal Powerful Surveys module, impacting confidentiality and integrity. There is no impact on system availability. Exploitation requires high privileges and user interaction, which limits the ease of exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor Drupal security advisories for updates. Given the high privileges and user interaction required, limiting user permissions and exercising caution with user inputs may reduce risk.