CVE-2026-11909 | THREATINT

Description

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.

PUBLISHED Reserved 2026-06-10 | Published 2026-07-10 | Updated 2026-07-13 | Assigner drupal

Problem types

CWE-862 Missing Authorization

Product status

0.0.0 (semver) before 4.0.6

affected

Credits

Pierre Rudloff (prudloff) finder

Alberto Paderno (avpaderno) remediation developer

Pierre Rudloff (prudloff) remediation developer

Greg Knaddison (greggles) coordinator

Juraj Nemec (poker10) coordinator

References

www.drupal.org/sa-contrib-2026-044

cve.org (CVE-2026-11909)

nvd.nist.gov (CVE-2026-11909)

Download JSON