CVE-2026-107255

Name of the Vulnerable Software and Affected Versions Restrict route by IP versions 0.0.0 through 1.3.1 Restrict route by IP versions 2.0.0 through 2.0.1

Description An incorrect authorization issue exists where the module fails to reliably restrict a subset of dynamic routes, which are routes that change based on specific parameters or conditions. This leads to an access bypass that allows forceful browsing.

Recommendations Update Restrict route by IP versions 0.0.0 through 1.3.1 to a newer version. Update Restrict route by IP versions 2.0.0 through 2.0.1 to a newer version.