Missing Authorization in Easy Breadcrumb by Drupal
CVE-2026-107309

Currently unrated

Key Information:

Vendor: Drupal
Status: Easy Breadcrumb
Vendor: CVE Published:; 30 October 2026

What is CVE-2026-107309?

A missing authorization flaw in Easy Breadcrumb for Drupal enables unauthorized users to access and manipulate areas of the site, leading to potential forceful browsing exploits. This vulnerability affects all versions of Easy Breadcrumb from 0.0.0 to 2.0.11, posing risks to data integrity and security.

Affected Version(s)

Easy Breadcrumb 0.0.0 < 2.0.11

References

https://www.drupal.org/sa-contrib-2026-212

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 30, 2026
Vulnerability Reserved
Oct 7, 2026

Credit

Marcus Johansson (marcus_johansson)

Brooke Mahoney (loopduplicate)

Swan Kalata (akalata)

Juraj Nemec (poker10)

CVE-2026-107309 Data

JSON