CVE-2026-114548: vulnerability in Drupal ImageAPI Optimize WebP
ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.1%
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.
Affected products
Drupal · ImageAPI Optimize WebP