Auth bypass in Drupal Material Icons

CVE-2026-3210

Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4.

Vulnerability class: Broken Access Control

EPSS: 0.000 (13.9th percentile) — read the EPSS interpretation.