NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-108099

CVSS: —
EPSS: —
Published: —
Modified: —

Analyze CVE-2026-108099 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

NVD CVE.org GitHub PoCs EPSS (—)

In the news

4 stories

Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.

BleepingComputerOct 17, 14:32 UTC · 8d agoVulnerabilityCVE-2026-108097 CVE-2026-1080993

82

Drupal patches two critical RCE flaws and XSS bugs

Fixes are in Drupal 11.4.10, 11.3.19 and 10.6.19, plus Entity List 3.0.10; Field UI can be uninstalled.

SecurityWeekOct 19, 15:47 UTC · 6d agoVulnerabilityCVE-2026-108099 CVE-2026-108097 CVE-2026-108515+11 · 1 read

74

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal patched critical Field UI RCE CVE-2026-108097, reachable without login through some contributed modules, with no attacks reported.

The Hacker NewsOct 15, 12:07 UTC · 10d agoVulnerabilityCVE-2026-108097 CVE-2026-108099 CVE-2026-108514+13 · 2 reads

74

Drupal patches critical RCEs CVE-2026-108097 and CVE-2026-108099

The captured page gives no affected versions, fixed releases, or statement on exploitation.

SOCRadarOct 19, 14:32 UTC · 6d agoVulnerabilityCVE-2026-108097 CVE-2026-1080991 · 1 read

46