Vulnerabilities
Drupal patches critical RCE flaws in core and Entity List module
Administrators must update Drupal core and the Entity List module to fix two remote code execution vulnerabilities that affect all supported versions.
CVE-2026-108097
Everything Threat Times has reported about CVE-2026-108097: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Drupal patches critical RCE in Field UI module affecting core versions
Fixes released on October 14 address a critical remote code execution flaw in Drupal core that requires contributed modules to exploit.