
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.
3 stories, newest first · one card per story

Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.

Drupal patched critical Field UI RCE CVE-2026-108097, reachable without login through some contributed modules, with no attacks reported.
Drupal warns of critical Field UI remote code execution, CVE-2026-108097, including an unauthenticated contributed-module path.
Today 2.1K readers · 2.6K views · 393 reads · all time 108K views