vendors:Drupal × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · há 1d · 3 fontes · 3 atualizações critical

Drupal discloses critical Field UI RCE flaw CVE-2026-108097 exploitable via contributed modules, including an unauthenticated path

Drupal published an advisory on October 14, 2026 for CVE-2026-108097, a critical remote code execution vulnerability in the Field UI module (fieldui) of Drupal core. The advisory gives it a risk score of 19/25, with basic attack complexity, no authentication required, and full confidentiality and integrity impact. Drupal core alone is not…

CVE-2026-108097 CVE-2026-108099 CVE-2026-108515 government education

f5.com · há 1d exploit público critical

Drupal Core CVE-2026-9082 JSON:API pre-auth SQL injection actively exploited within days of disclosure

CVE-2026-9082 is a critical (CVSS 9.8) pre-authentication SQL injection in the JSON:API module of Drupal Core. It was published on May 20, 2026 and added to the CISA KEV catalog the same month, with a remediation deadline of May 27. F5 sensors recorded 576 exploitation attempts from 9 source IPs between May 20 and May 31, 2026. The earlie…

CVE-2026-9082