NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#sa-core

1 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedcms2 drupal2 field-ui2 rce2 cve-2026-1080971

2 stories, newest first · one card per story

GBHackers6d agohigh

Drupal warns of critical Field UI RCE in core (CVE-2026-108097)

Core alone is not directly exploitable, but at least one contributed-module path needs no login.

4 sources4 min readdrupal field-ui

1

Drupal Security Advisories11d agohigh

Drupal core - Critical - Remote code execution - SA-CORE-2026-014

Drupal warns of critical Field UI remote code execution, CVE-2026-108097, including an unauthenticated contributed-module path.

3