← Vulnerability Intelligence

CVE-2026-118561

Not yet rated

Not yet rated — under the NVD policy in effect since April 2026, most CVEs are no longer analyzed immediately. The EPSS score (if available) is still shown.

Description

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

Metrics

EPSS — exploit probability
0% (percentile: 4) as of 1 November 2026
CWE
CWE-73

References