GCVE-110-NCSC-2026-438

Advisory Published

Vulnetix · Advisory published October 19, 2026

A remote code execution vulnerability exists in Drupal core's Field UI module, exploitable via contributed or custom modules, with some attacks requiring no authentication and partial mitigation available through Drupal Steward.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
drupal	vers:unknown/*	—	—
Drupal	vers:unknown/*	—	—

Aliases

CVE-2026-108097

References

advisory

Browse GCVE Records

2,491 records in the GCVE database · Updated October 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON