CVE-2026-16645

CriticalCVSS 9.1

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects versions from 0.0.0 to 3.2.0.

Risk Assessment

An attacker may access unauthorized resources, potentially leading to disclosure of sensitive information.

Recommendation

Update the PhotoSwipe module to the latest available version that includes the fix.

Original NVD description (English source)

Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.