🔐 CVE Alert

CVE-2026-114544

UNKNOWN 0.0

Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6.

CWE CWE-863
Vendor drupal
Product media bulk upload
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal media bulk upload

Be the first to know when new unknown vulnerabilities affecting drupal media bulk upload are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Media Bulk Upload
0.0.0 < 3.0.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-243

Credits

Stuart Rowlands (stooit) Jen M (jannakha) Sjoerd Wenker (sjerdo) Greg Knaddison (greggles) Juraj Nemec (poker10)