Skip to main content

Drupal Releases Security Advisory for Drupal Core

Successful exploitation of CVE-2026-108097 could allow an unauthenticated attack to perform remote code execution

Threat ID:
CC-4871
Threat Severity:
Medium
Published:
16 October 2026 1:01 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Successful exploitation of CVE-2026-108097 could allow an unauthenticated attack to perform remote code execution

Threat details

Introduction

Drupal has released a security advisory to address a vulnerability in Field UI module in Drupal Core.

  • CVE-2026-108097 - 'Remote Code Execution' vulnerability

Remediation advice

Affected organisations are encouraged to review Drupal's SA-CORE-2026-014 security advisory and apply the relevant updates as soon as possible.

Definitive source of threat updates

Last edited: 16 October 2026 1:02 pm