CVE-2026-81164

The Entity PDF module for Drupal (versions 0.0.0 through 2.1.5 ) contains a Missing Authorization vulnerability that facilitates Forceful Browsing . The root cause is that the module fails to verify entity view access when fetching a PDF route. This oversight allows an unauthorized user to access...