Entity List

Mentions · 7d1
Mentions · 30d3
All mentions3
First seenOct 15, 2026
Last mentioned6d ago

Timeline

3 articles · newest first

Drupal patches two critical RCE flaws and XSS bugs

Fixes are in Drupal 11.4.10, 11.3.19 and 10.6.19, plus Entity List 3.0.10; Field UI can be uninstalled.

SecurityWeekupdated Oct 19, 18:13 UTC · 6d agofirst Oct 19, 15:47 UTC · 6d agoVulnerability 4 sourcesCVE-2026-108099 CVE-2026-108097 CVE-2026-108515+11 · 1 read

Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.

BleepingComputerOct 17, 14:32 UTC · 8d agoVulnerabilityCVE-2026-108097 CVE-2026-1080993

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal patched critical Field UI RCE CVE-2026-108097, reachable without login through some contributed modules, with no attacks reported.

The Hacker NewsOct 15, 12:07 UTC · 10d agoVulnerabilityCVE-2026-108097 CVE-2026-108099 CVE-2026-108514+13 · 2 reads

Related CVEs

by mentions

CVE-2026-108097—
published —PoC ×2
CVE-2026-108099—
published —
CVE-2026-108514—
published —
CVE-2026-108515—
published —

Appears with

Drupalvendor · 3
Field UIproduct · 3
Drupalorganization · 2
Drupalproduct · 2
Pantheonorganization · 1
Acquiaorganization · 1
Ginproduct · 1
Drupal Security Teamorganization · 1

Entities are extracted by the model from each article. First seen Oct 15, 2026, last mentioned 6d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.