CVE-2026-11909
CVE-2026-11909 · Examples for Developers - Moderately critical - Access bypass - SA-CONTRIB-2026-044
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.
CVSS 3.3 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
examples for developers
- Versions
- ≥ 0.0.0, < 4.0.6: Affected (semver)
Update to 4.0.6
drupal/examples Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 4.0.6
Update to 4.0.6