Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.
82
Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.
Canada's Cyber Centre warns of critical remote code execution in unpatched Drupal core releases.
Drupal patched critical Field UI RCE CVE-2026-108097, reachable without login through some contributed modules, with no attacks reported.
Drupal warns of critical Field UI remote code execution, CVE-2026-108097, including an unauthenticated contributed-module path.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.1K readers · 2.6K views · 393 reads · all time 108K views