CVE-2026-107253: Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196
Published Oct 30, 2026
·Updated
Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: ..
Event History
Oct 30, 2026
CVE Published
via MITRE·03:10 AM
Data Sourced
via MITRE·03:10 AM
Description
Data Sourced
via NVD·04:17 AM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments should be considered affected?
Drupal deployments using Orphans Media should be considered affected, as the issue is listed as affecting all versions (*.*).
2
What capabilities does an attacker need to exploit this issue?
The CVSS vector indicates network reachability, high attack complexity, and high privileges are required. No user interaction is required.
3
What is the expected security impact if exploitation succeeds?
Successful exploitation can have high confidentiality and integrity impact. The availability impact is rated as none.