CVE-2026-81164

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

CVE-2026-81164

The Entity PDF module (versions 0.0.0 to 2.1.5 ) contains a missing authorization vulnerability that enables Forceful Browsing . The root cause is that the module fails to verify entity view access permissions when fetching a PDF route. Consequently, an attacker could potentially access PDFs of e...

EUVD-2026-69999

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...