CVE-2026-114548

Full vulnerability record from the local CVENow database.

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-10-30 04:18:15.470000

Last modified

2026-10-30 04:18:15.470000

View original CVE JSON

{
  "id": "CVE-2026-114548",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-30T04:18:15.470",
  "lastModified": "2026-10-30T04:18:15.470",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Drupal",
          "product": "ImageAPI Optimize WebP",
          "collectionURL": "https://www.drupal.org/project/imageapi_optimize_webp",
          "repo": "https://git.drupalcode.org/project/imageapi_optimize_webp",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "2.1.2",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-525"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.drupal.org/sa-contrib-2026-247",
      "source": "[email protected]"
    }
  ]
}