Critical Drupal RCE Vulnerability Could Let Attackers Take Over Websites Without Authentication
Drupal has released security updates for a critical remote code execution vulnerability that could let attackers take over affected websites without logging in. Tracked as CVE-2026-108097, the flaw affects the Field UI module in Drupal core. The Drupal Security Team published its warning on October...