CVE-2026-108097Vulnerability
Reported by 4 independent sources · first reported by CERT-FR · last reported
Last reported 5 days ago
What the reports say
5 reports, newest first · the exact sentence from each-
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw“The second impacts the Field UI module in Drupal core and is tracked as CVE-2026-108097.”
-
Drupal Patches Critical RCEs: CVE-2026-108097 & 108099“Drupal Patches Critical RCEs: CVE-2026-108097 & 108099”
-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“…6516, CVE-2026-83540, CVE-2026-84897, CVE-2026-83540 (WolfSSH), GHSA-673q-mjm6-r5xr, CVE-2026-96889, GHSA-p3m5-59mp-jv5r (Next.js), CVE-2026-108097, CVE-2026-108099 (Drupal), CVE-2026-15911 (confluent-kafka), CVE-2026-102764 (BeyondTrust Remote Support), CVE-2025-61624 (Fortinet…”
-
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules“Tracked as CVE-2026-108097, the flaw sits in Field UI, the core module behind the admin pages where site builders manage fields and how they display.”
-
Multiples vulnérabilités dans Drupal (15 octobre 2026)“Référence CVE CVE-2026-108097”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-108099, CVE-2026-108515, CVE-2026-108514, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-14814, CVE-2026-16301, CVE-2026-92883, CVE-2026-97229, CVE-2026-85947, CVE-2026-85948, CVE-2026-85955
Thanks — we review every report.