CVE-2026-114523

CVE-2026-114523 · DRUPAL-CONTRIB-2026-220

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site.

Fix available

Published

2026-10-21T17:35:01Z

Updated

2026-10-21T18:15:03.155938650Z

Stack: php

Check your server →