CVE-2026-11909

LOW 3.3

Examples for Developers - Moderately critical - Access bypass - SA-CONTRIB-2026-044

CVSS Score

3.3

EPSS Score

0.1%

EPSS Percentile

4th

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.

CWE	CWE-862
Vendor	drupal
Product	examples for developers
Ecosystems	PHP CMS
Industries	WebMedia
Published	Jul 10, 2026
Last Updated	Jul 13, 2026

Stay Ahead of the Next One

Get instant alerts for drupal examples for developers

Be the first to know when new low vulnerabilities affecting drupal examples for developers are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Examples for Developers

0.0.0 < 4.0.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗

drupal.org: https://www.drupal.org/sa-contrib-2026-044

Credits

Pierre Rudloff (prudloff) Alberto Paderno (avpaderno) Pierre Rudloff (prudloff) Greg Knaddison (greggles) Juraj Nemec (poker10)