CVE-2026-118571

Low risk· EPSS 3%

Published: 30/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

The Media Alias Display module for Drupal contains a use of web browser cache containing sensitive information vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from 0.0.0 to 2.1.3 and from 3.0.0 to 3.0.3.

Risk Assessment

Sensitive information could be disclosed to unauthorized parties through the browser cache, potentially leading to a confidentiality breach.

Recommendation

Update the Media Alias Display module to the latest version beyond the affected ranges.

Other vulnerabilities in Drupal Media Alias Display

CVE-2026-114546Low risk· EPSS 4%
The vulnerability in the Drupal Media Alias Display module involves use of web browser cache containing sensitive information, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from 0.0.0 to 2.1.2 and from 3.0.0 to 3.0.2.

Original NVD description (English source)

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS