CVE-2026-114546
Low risk· EPSS 4%Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The vulnerability in the Drupal Media Alias Display module involves use of web browser cache containing sensitive information, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from 0.0.0 to 2.1.2 and from 3.0.0 to 3.0.2.
Risk Assessment
Sensitive information may be disclosed through browser cache, potentially leading to unauthorized access. The threat is particularly relevant in shared environments.
Recommendation
Update the Media Alias Display module to a version later than 2.1.2 or 3.0.2. Review cache-control headers and resource access configuration.
Other vulnerabilities in Drupal Media Alias Display
Original NVD description (English source)
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS