Skip to content

Product

Drupal File (Field) Paths vulnerabilities

1 published CVE affecting Drupal File (Field) Paths, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest Drupal File (Field) Paths CVEs

Newest publication first

  1. CVE-2026-1556 Information disclosure via file URI overwrite in File (Field) Paths

    Published
    MediumCVSS 6.9 EPSS 0.42%

    Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to disclose other users’ private files via filename‑collision uploads. This can cause hook_node_insert() consumers (for...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.