CVE-2026-11909

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6...

CVE-2026-11909

The Examples for Developers project (versions 0.0.0 through 4.0.6 ) contains a Missing Authorization vulnerability that allows for Forceful Browsing . The root cause is the "Read from a file" feature within the file_example submodule, which can be exploited to expose any file accessible by PHP , ...