CVE-2026-107255

The Restrict route by IP module for Drupal is vulnerable to an Incorrect Authorization vulnerability, leading to an access bypass . The module fails to reliably restrict a subset of dynamic routes , which can enable Forceful Browsing . This issue affects versions 0.0.0 to 1.3.1 and 2.0.0 to 2.0.1...