Tag: cve 2026 108097

Drupal Fixes Core RCE Flaw with No-Login Path via Contributed Modules

A critical remote code execution flaw in Drupal's core Field UI module, tracked as CVE-2026-108097, has been patched, but the fix only helps sites that don't rely on contributed modules or custom code to stay safe. Over 151,000 Drupal sites are still vulnerable, highlighting the urgent need for an upgrade.