CVE-2026-11909

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6...

CVE-2026-11909

The Examples for Developers project (versions 0.0.0 to 4.0.6 ) is vulnerable to a missing authorization issue that enables Forceful Browsing . The root cause lies in the "Read from a file" feature of the file_example submodule, which can be leveraged to expose any file accessible by PHP . This co...