DRUPAL-CONTRIB-2026-011

vendorUSosv
view advisory published 2026-02-25Licence: per source

This module enables you to add icons to CKEditor. The module doesn't sufficiently add custom permissions to the dialog and autocomplete routes, allowing full access to the routes in most scenarios.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-3210US—OT elevated—
Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan