attack_type:xss × cves:CVE-2026-108515 × limpar

Resultados

2 casos · pág. 1/1

cert.ssi.gouv.fr · há 9h high

CERT-FR: Multiple Drupal vulnerabilities allow remote code execution and XSS (CVE-2026-108097, -108514, -108515)

CERT-FR advisory CERTFR-2026-AVI-1321, published 15 October 2026, reports multiple vulnerabilities in Drupal core that allow a remote attacker to execute arbitrary code and perform indirect code injection (XSS). The advisory references CVE-2026-108097, CVE-2026-108514 and CVE-2026-108515, based on three Drupal security bulletins dated 14 …

CVE-2026-108097 CVE-2026-108514 CVE-2026-108515

gbhackers.com · há 1d · 3 fontes · 3 atualizações critical

Drupal discloses critical Field UI RCE flaw CVE-2026-108097 exploitable via contributed modules, including an unauthenticated path

Drupal published an advisory on October 14, 2026 for CVE-2026-108097, a critical remote code execution vulnerability in the Field UI module (fieldui) of Drupal core. The advisory gives it a risk score of 19/25, with basic attack complexity, no authentication required, and full confidentiality and integrity impact. Drupal core alone is not…

CVE-2026-108097 CVE-2026-108099 CVE-2026-108515 government education