Deciphered

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Deciphered records in CISA KEV

No Deciphered vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Filefield Paths 1 record LOW

Records

1 record

TI-2026-01245 CVE-2026-1556 · GHSA-rfjg-8j24-w8q7

Information disclosure via file URI overwrite in File (Field) Paths

LOW 37

Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to disclose other users’ private files via filename‑collisi…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00407 Published 2026-03-26 Fixed in 7.x-1.3 CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0