CVE-2026-18259

The vulnerability in Drupal Token Content Access allows attackers to exploit observable timing discrepancies, enabling brute force attacks on the system. This affects all versions from 0.0.0 to 3.1.2, potentially compromising user access control. Organizations utilizing these versions should prioritize patching to mitigate the risk of unauthorized access.