CVE-2026-107312

MediumCVSS 4.3

Published: 30/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

The Drupal Examples for Developers module contains an Allocation of Resources Without Limits or Throttling vulnerability that allows excessive allocation. This issue affects Examples for Developers versions from 0.0.0 to 4.0.7.

Risk Assessment

An attacker could exploit this flaw to exhaust server resources (e.g., memory or CPU), causing a denial of service.

Recommendation

Update the Examples for Developers module to a version later than 4.0.7 that includes the fix.

Other vulnerabilities in Drupal Examples for Developers

CVE-2026-11909Low
The Examples for Developers module for Drupal has a missing authorization vulnerability, allowing forceful browsing and unauthorized access to resources. This affects versions from 0.0.0 to 4.0.6.

Original NVD description (English source)

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Allocation. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.7.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS