Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication

Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without logging in. Tracked as CVE-2026-108097, the flaw affects the Field UI module in Drupal core. The Drupal Security Team published its warning on October 14, 2026. The official security advisory, SA-CORE-2026-014, assigns the issue […]

This article has been indexed from Cyber Security News

Read the original article: