CVE-2026-3214

• Arnabdotorg/Captcha

  cpe:2.3:a:arnabdotorg:captcha:*:*:*:*:*:drupal:*:*

  Range: <8.x-1.17

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

• www.drupal.org/sa-contrib-2026-015nvdVendor Advisory

• Wordfence Intelligence Weekly WordPress Vulnerability Report (May 4, 2026 to May 10, 2026)
  Wordfence Blog · May 14, 2026
• Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
  The Hacker News · May 14, 2026
• Why we use CAPTCHAs, (Mon, May 11th)
  SANS Internet Storm Center · May 11, 2026
• Australian Cyber Security Centre Issues Alert Over ClickFix Attacks
  Infosecurity Magazine · May 8, 2026
• One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk
  The Hacker News · May 8, 2026
• Australia warns of ClickFix attacks pushing Vidar Stealer malware
  BleepingComputer · May 7, 2026
• ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories
  The Hacker News · May 7, 2026
• Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails
  Infosecurity Magazine · May 5, 2026
• Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations
  SecurityWeek · May 5, 2026
• Microsoft: Phishing campaign used fake compliance notices to compromise employee accounts
  Help Net Security · May 5, 2026
• Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
  The Hacker News · May 5, 2026
• ⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
  The Hacker News · May 4, 2026
• Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks
  The Hacker News · May 4, 2026
• A week in security (April 27 &#8211; May 3)
  Malwarebytes Labs · May 4, 2026
• 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign
  The Hacker News · May 1, 2026
• Fake CAPTCHA scam turns a quick click into a costly phone bill
  Malwarebytes Labs · Apr 28, 2026
• Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud
  The Hacker News · Apr 27, 2026
• It pays to be a forever student
  Cisco Talos Intelligence · Apr 23, 2026
• Moving past bots vs. humans
  Cloudflare Blog · Apr 21, 2026
• The n8n n8mare: How threat actors are misusing AI workflow automation
  Cisco Talos Intelligence · Apr 15, 2026
• Wordfence Intelligence Weekly WordPress Vulnerability Report (March 23, 2026 to March 29, 2026)
  Wordfence Blog · Apr 2, 2026
• New Venom Stealer MaaS Platform Automates Continuous Data Theft
  Infosecurity Magazine · Apr 1, 2026
• 30th March – Threat Intelligence Report
  Check Point Research · Mar 30, 2026
• Compromised WordPress Sites Deliver ClickFix Attacks in Global Infostealer Campaign
  Infosecurity Magazine · Mar 11, 2026