Field UI

Reported Context (3)

The second impacts the Field UI module in Drupal core and is tracked as CVE-2026-108097. Drupal Patches Two Critical Core Flaws With Potential Unauthenticated RCE Paths
The first flaw, tracked CVE-2026-108097, affects the core Field UI module, while CVE-2026-108099 affects Entity List. Neither is directly exploitable through the affected component alone, but Drupal warns that multiple Drupal Patches Two Critical RCE Vulnerabilities in Core and Entity List
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. Drupal Patches Critical Field UI RCE Flaw Requiring Contributed Module Exposure

CVE (4)

People (2)

Vendors (1)

Products (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.