unscored
CVE-2026-107255
Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing.
Impact
Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Restrict Route By IP | from 2.0.0 before 2.0.1 from 0.0.0 before 1.3.1 |