CVE-2026-107255
Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.
| CWE | CWE-863 |
| Vendor | drupal |
| Product | restrict route by ip |
| Ecosystems | |
| Industries | WebMedia |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal restrict route by ip
Be the first to know when new unknown vulnerabilities affecting drupal restrict route by ip are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / Restrict route by IP
0.0.0 < 1.3.1 2.0.0 < 2.0.1
Credits
Elia Wehbe (ewehbe) Elia Wehbe (ewehbe) solideogloria Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)