CVE-2026-114546CWE-525

CVE-2026-114546: vulnerability in Drupal Media Alias Display

Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Published

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.
Related CVEs — Drupal Media Alias Display

In the same product, most dangerous first.