CVE-2026-73477

An Incorrect Authorization flaw in the Drupal Quick Tabs module (versions 0.0.0 through 4.3.1 ) allows forceful browsing of restricted content. The module failed to correctly enforce access when rendering node and block tabs: it treated a neutral access result as a grant for node tabs and block p...