Drupal issues security updates for critical code execution flaw
According to Cyber Security News, CVE-2026-108097 affects Drupal core’s Field UI module and could allow attackers to take over affected websites without logging in. SecurityWeek also reports critical flaws involving Entity List and Field UI, with exploitation paths available through contributed modules, and warns of a risk of rapid exploitation.
- Drupal’s security warning was published October 14, 2026, according to Cyber Security News.
Covered by 2 publishers within 2 hours of the first report.
Reporting2
SecurityWeek Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw · Ionut Arghire
Cyber Security News Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication · Abinaya