#field-ui

2 stories this week · 5 this month · 5 in 6 months · mostly security

Stories per day · 30 days

4 stories, newest first · one card per story

Core alone is not directly exploitable, but contributed modules or custom code can open unauthenticated paths; no public exploit is reported.

Drupal patched two critical remote code execution flaws and warned exploits could appear within hours or days.

2 min readdrupal rce

Drupal patched critical Field UI RCE CVE-2026-108097, reachable without login through some contributed modules, with no attacks reported.

4 min readdrupal rce

Drupal warns of critical Field UI remote code execution, CVE-2026-108097, including an unauthenticated contributed-module path.

Stories tagged #field-ui