🔐 CVE Alert

CVE-2026-81163

UNKNOWN 0.0

Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.

CWE CWE-22
Vendor drupal
Product media library importer
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal media library importer

Be the first to know when new unknown vulnerabilities affecting drupal media library importer are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Media Library Importer
0.0.0 < 2.1.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-129

Credits

Marcus Johansson (marcus_johansson) Italo Mairo (itamair) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)