[ CVE-2026-114523 · Published 30 Oct 2026 ]

Vulnerability in Drupal Ffmpeg Image Toolkit

Not scored yet EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund28 Oct 2026WID-SEC-2026-4230

Drupal Erweiterungen: Multiple vulnerabilities Translated from German
CVE-2026-118553CVE-2026-114554CVE-2026-107256+65 more CVEs

[ References ]References

www.drupal.org/sa-contrib-2026-220

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

Drupal Erweiterungen: Multiple vulnerabilities Translated from German

[ References ]References