CVE-2026-107251

The Entity Reference Manager (Merge entities) module for Drupal is affected by an Incorrect Authorization vulnerability (CWE-863). This flaw occurs because the module fails to sufficiently restrict access to all entity management operations. Consequently, users with content viewing permissions ca...