Critical Drupal Core Flaw Allows Unauthenticated Remote Code Execution
RedSide Security October 20, 2026 Vulnerability 5 views
Drupal has patched a critical, unauthenticated remote code execution flaw in Drupal core's Field UI module tracked as CVE-2026-108097, warning that attackers could take over affected sites without logging in.
Patch Management
Remote Code Execution
Web Security
Drupal
CVE-2026-108097
CMS Security
Vulnerability Disclosure
Continue reading: Critical Drupal Core Flaw Allows Unauthenticated R…