Drupal patches critical RCE flaws CVE-2026-108097 and CVE-2026-108099 with fast exploitation warning
1. Executive summary Drupal has released fixes for five vulnerabilities, two of them critical remote code execution flaws: CVE-2026-108099 in the contributed Entity List
19 Oct 2026 · 5 min read
read →