NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#sa-core-2026-014

1 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relateddrupal2 remote-code-execution2 advisory1 drupal-core1 field-ui1 patch1

2 stories, newest first · one card per story

Cyber Security News6d agohigh

Drupal Field UI flaw can allow unauthenticated takeover (CVE-2026-108097)

Core alone is not directly exploitable, but contributed modules or custom code can open unauthenticated paths; no public exploit is reported.

4 sources3 min readdrupal field-ui

1

Canadian Centre for Cyber Security10d agohigh

Drupal security advisory (AV26-1047)

Canada's Cyber Centre warns of critical remote code execution in unpatched Drupal core releases.

2 sources drupal drupal-core

4