CVE-2026-3210

The Drupal Material Icons module (versions prior to 2.0.4 ) is vulnerable to an incorrect authorization issue. The module fails to sufficiently add custom permissions to the dialog and autocomplete routes, which can allow unauthorized users to perform forceful browsing by gaining full access to t...