
Vulnerabilities
Drupal Patches Critical Core RCE Flaws, Warns of Rapid Exploitation Risk
Drupal releases updates for five vulnerabilities, including two critical remote code execution flaws in core and contributed modules.
Everything Threat Times has reported about CVE-2026-108099: 2 stories, newest first. Part of our Vulnerabilities coverage.

Drupal releases updates for five vulnerabilities, including two critical remote code execution flaws in core and contributed modules.

Administrators must update Drupal core and the Entity List module to fix two remote code execution vulnerabilities that affect all supported versions.