Auth bypass in Drupal Photoswipe - Responsive JavaScript Modal Image Gallery

CVE-2026-16645

Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.

Vulnerability class: Broken Access Control

Affected products

Weakness classification (CWE)

References