Index
Search
Search the public record. Drafts and scheduled notes are not included.
Critical
news
Drupal core Field UI RCE is CVE-2026-108097: update to 11.4.10, 11.3.19 or 10.6.19
Drupal SA-CORE-2026-014 fixes a critical remote code execution flaw in the core Field UI module, CVE-2026-108097. Core alone is not directly exploitable, but contributed modules expose it and at least one known path needs no login. Fixed in 11.4.10, 11.3.19 and 10.6.19. Not in CISA KEV as of check. No public PoC confirmed.
Published 4h ago
CriticalNo PoC
CVE-2026-108097
Drupal core Field UI remote code execution (SA-CORE-2026-014)
RCE
Published 4d ago