Multiples vulnérabilités dans Drupal (15 octobre 2026)

vulnerability

Multiples vulnérabilités dans Drupal (15 octobre 2026)

Multiple vulnerabilities have been identified in Drupal, allowing for remote code execution and remote cross-site scripting (XSS). These vulnerabilities affect older versions of Drupal.

CERT-FR · 2d ago Medium

CVE-2026-108097 CVE-2026-108514 CVE-2026-108515 drupal vulnerability xss

vulnerability

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

The vulnerability stems from a flaw in how the module renders tables, and a fix was released on October 14th for Drupal 11.4.x, 11.3.x, and 10.6.x. The advisory notes that a significant number of sites using affected ver…

The Hacker News · 2d ago Medium

CVE-2026-108097 CVE-2026-108099 CVE-2026-108515 rce remote code execution drupal

news.mlab.sh

Multiples vulnérabilités dans Drupal (15 octobre 2026)

Multiples vulnérabilités dans Drupal (15 octobre 2026)

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules