CVE-2026-114523

Full vulnerability record from the local CVENow database.

Description

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-10-30 04:18:10.373000

Last modified

2026-10-30 04:18:10.373000

View original CVE JSON

{
  "id": "CVE-2026-114523",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-30T04:18:10.373",
  "lastModified": "2026-10-30T04:18:10.373",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Special Elements used in an OS Command (\"OS Command Injection\") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Drupal",
          "product": "Ffmpeg Image Toolkit",
          "collectionURL": "https://www.drupal.org/project/ffmpeg_image_toolkit",
          "repo": "https://git.drupalcode.org/project/ffmpeg_image_toolkit",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "1.0.3",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.drupal.org/sa-contrib-2026-220",
      "source": "[email protected]"
    }
  ]
}