/
attack_type:xss × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 3 fontes · 3 atualizações critical

Drupal discloses critical Field UI RCE flaw CVE-2026-108097 exploitable via contributed modules, including an unauthenticated path

Drupal published an advisory on October 14, 2026 for CVE-2026-108097, a critical remote code execution vulnerability in the Field UI module (fieldui) of Drupal core. The advisory gives it a risk score of 19/25, with basic attack complexity, no authentication required, and full confidentiality and integrity impact. Drupal core alone is not…

cert.ssi.gouv.fr · critical

CERT-FR: Multiple Palo Alto Networks vulnerabilities, including RCE; CVE-2026-0322 actively exploited

CERT-FR advisory CERTFR-2026-AVI-1317 is not the source here; this record covers CERTFR-2026-AVI-1326, which reports multiple vulnerabilities in Palo Alto Networks products fixed in vendor bulletins of October 14, 2026. Some flaws allow remote arbitrary code execution, privilege escalation and remote denial of service. Other impact classe…