CVE-2026-73478

Drupal Diff is a contrib module that enables viewing differences between revisions on any entity type. It contains an Incorrect Authorization flaw that allows forceful browsing : the module does not sufficiently restrict access to non-node entity revision diffs . The practical impact is that a us...