poslední zpráva
SPOJENO AI
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
Drupal NL IT US CA FI FR
CVE v události 5
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-108097 | – | – | – |
| CVE-2026-108099 | – | – | – |
| CVE-2026-108514 | – | – | – |
| CVE-2026-108515 | – | – | – |
| CVE-2026-110738 | – | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 6
-
· NCSC-NL NL
NCSC-2026-0438 [1.00] [M/H] Kwetsbaarheden verholpen in Drupal Core en modules door Drupal
Drupal heeft kwetsbaarheden verholpen in de Drupal core Field UI module, Entity List module, Navigation module, Link module en het Gin administratie thema. De kwetsbaarheden betreffen meerdere modules binnen Drupal. In de Field UI module en de Entity List module is een remote code execution kwetsbaarheid aanwezig die kan worden misbruikt via contributed modules of custom code, waarbij sommige aanvalspaden geen authenticatie vereisen. De Navigation module, Link module en het Gin administratie…
-
· CSIRT Itálie (ACN) IT
Rilevate vulnerabilità in Drupal
Rilevate 3 vulnerabilità, di cui una con gravità "critica", in Drupal, noto Content Management System (CMS) open source. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto non autenticato di eseguire codice arbitrario sui sistemi interessati.
-
· BleepingComputer US nadpis události
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
-
· Cyber Centre Kanada CA
Drupal security advisory (AV26-1047)
Serial number: AV26-1047 Date: October 15, 2026 As of October 14, 2026, Drupal is affected by vulnerabilities in the following product: Drupal core Prior to 11.4.10 Prior to 11.3.19 Prior to 10.6.19 The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations. Drupal core Critical - Remote code execution SA-CORE-2026-014 Drupal Security Advisories
-
· zachyceno · NCSC-FI FI
In Drupal multiple vulnerabilities
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-108097, Summary: Drupal core: - CVE-2026-108097: A remote code execution vulnerability exists within the Field UI module in Drupal core. - CVE-2026-108515: The Drupal core Link module provides a field type that can be used for internal and external URLs. - CVE-2026-108514:The Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting …
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Drupal (15 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une injection de code indirecte à distance (XSS).