🔐 CVE Alert

CVE-2026-114523

UNKNOWN 0.0

Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3.

CWE CWE-78
Vendor drupal
Product ffmpeg image toolkit
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal ffmpeg image toolkit

Be the first to know when new unknown vulnerabilities affecting drupal ffmpeg image toolkit are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Ffmpeg Image Toolkit
0.0.0 < 1.0.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-220

Credits

Marcus Johansson (marcus_johansson) Marcin Grabias (graber) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)