In Drupal multiple vulnerabilities
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-108097, Summary: Drupal core: - CVE-2026-108097: A remote code execution vulnerability exists within the Field UI module in Drupal core. - CVE-2026-108515: The Drupal core Link module provides a field type that can be used for internal and external URLs. - CVE-2026-108514:The Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting …
CVE-2026-108097 CVE-2026-108099 CVE-2026-108514 CVE-2026-108515 CVE-2026-110738 Drupal FI