File Handling Vulnerability in Drupal Orphans Media Plugin
CVE-2026-107253

Currently unrated

Key Information:

Vendor

Drupal
Status
Orphans Media
Vendor
CVE Published:
30 October 2026

What is CVE-2026-107253?

A file handling vulnerability exists in the Drupal Orphans Media plugin that could potentially allow unauthorized access or manipulation of files. This flaw affects all versions of the plugin and poses a significant risk to system integrity. Administrators are urged to review the security patch details and apply necessary updates to safeguard against potential exploits.

Affected Version(s)

Orphans Media *.*

References

https://www.drupal.org/sa-contrib-2026-196

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Drew Webber (mcdruid)
Swan Kalata (akalata)
Juraj Nemec (poker10)
.