Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-25T22:21:47 photoswipe: PhotoSwipe: Unauthorized access due to missing authorization 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-425

Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.

A flaw was found in PhotoSwipe - Responsive JavaScript Modal Image Gallery. This missing authorization vulnerability allows an attacker to perform forceful browsing, potentially leading to unauthorized access to sensitive information or resources. By exploiting this flaw, an attacker can bypass intended access controls.

This Important vulnerability in Drupal PhotoSwipe does not affect Red Hat products as the vulnerable code is not present in the versions shipped with Red Hat offerings. Red Hat Developer Hub Not affected rhdh/rhdh-hub-rhel9 Self-service automation portal 2 Not affected ansible-automation-platform/automation-portal https://www.cve.org/CVERecord?id=CVE-2026-16645 https://nvd.nist.gov/vuln/detail/CVE-2026-16645 https://www.drupal.org/sa-contrib-2026-088