CVE-2026-73477

CVE-2026-73477 is an incorrect authorization vulnerability in the Drupal Quick Tabs module (versions 0.0.0 through 4.3.1). The module failed to correctly enforce access when rendering node and block tabs: it treated a neutral access result as a grant for node tabs and block plugins, and performed...