CVE-2026-114547

The Drupal TinyPNG component (versions 0.0.0 to 2.0.2 ) is vulnerable to a Missing Authorization vulnerability (CWE-862) that enables Forceful Browsing . This flaw allows unauthorized access to information disclosure. No specific exploit information or remediation steps are provided in the docume...

EUVD-2026-113526

Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2...