Drupal Field UI RCE: Check and Patch CVE-2026-108097 Now (2026)
On October 14, 2026, the Drupal Security Team published SA-CORE-2026-014: a critical 19/25 remote code execution flaw in the Field UI core module, tracked as CVE-2026-108097. If you run a Drupal site, this is one of those advisories you act on the same day. This one is unusual. The Drupal Field UI RCE is not … Read more