CVE-2026-107309: Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212

Published Oct 30, 2026

Updated

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11.

Event History

Oct 30, 2026

CVE Published

via MITRE·03:10 AM

Data Sourced

via MITRE·03:10 AM

DescriptionWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require an authenticated Drupal account or user interaction?

No. The CVSS vector indicates that no privileges and no user interaction are required.

What is the expected security impact if the issue is exploited?

The listed impact is limited to confidentiality, with low confidentiality impact and no indicated integrity or availability impact.

Which Easy Breadcrumb releases are in scope?

The issue affects Easy Breadcrumb versions from 0.0.0 through 2.0.11.

Can this be exploited remotely?

Yes. The attack vector is network-based, although exploitation is rated as requiring high attack complexity.

CVE-2026-107309: Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212

Event History

Frequently Asked Questions

Does exploitation require an authenticated Drupal account or user interaction?

What is the expected security impact if the issue is exploited?

Which Easy Breadcrumb releases are in scope?

Can this be exploited remotely?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require an authenticated Drupal account or user interaction?

What is the expected security impact if the issue is exploited?

Which Easy Breadcrumb releases are in scope?

Can this be exploited remotely?