CVE-2026-11909

CVE-2026-11909 concerns a missing authorization vulnerability in the Drupal Examples for Developers project, specifically in the file handling behavior exposed by the file_example submodule. The issue enables forceful browsing by allowing access to files PHP can reach, across Examples for Develop...