Mmastodon TechnologyCybersecurity first seen 19 d ago, last 19 d ago, peak #12

Drupal patches two critical remote code execution flaws

Original: 🤖 Drupal patched two critical RCE flaws: CVE-2026-108097 in core's Field UI module, CVE-2026-108099 in the contributed E

Drupal has released security updates fixing two critical remote code execution vulnerabilities: CVE-2026-108097 in the core Field UI module and CVE-2026-108099 in the contributed Entity List module. All currently supported versions of Drupal core are affected, and the project's security team warns that working exploits could emerge within hours or days, urging site administrators to apply the patches immediately.

Why now: Site administrators and security researchers are rushing to patch before exploits appear for these critical vulnerabilities.

DrupalCVE-2026-108097CVE-2026-108099Field UI moduleEntity List module

Open on mastodon →

Evidence

• 🤖 Drupal patched two critical RCE flaws: CVE-2026-108097 in core's Field UI module, CVE-2026-108099 in the contributed Entity List module. All currently supported core versions are affected and the security team warns exploits may surface within hours or days. 🔗 https://www.… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/2728740