CVE-2026-96389

The Drupal Xray Audit module is vulnerable to an access bypass issue due to missing authorization checks. Specifically, the module fails to sufficiently verify entity access when rendering an entity via the display-mode example route . This flaw allows an attacker to perform Forceful Browsing to ...