CVE-2026-110176 - File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers
CVE ID :CVE-2026-110176 Published : Oct. 31, 2026, 1:17 a.m. | 44 minutes ago Description :The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a file URL carries the download query parameter. In Drupal 7, returning a non-empty...