NewsSecurityWeek
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Teaser from the source
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Drupal
Other advisories
- HighCVE-2026-108515Drupal Core, Gin Admin Theme und Entity List: Mehrere Schwachstellen
- CriticalCVE-2026-96389Drupal Erweiterungen: Mehrere Schwachstellen
- Not ratedosv:CLEANSTART-2024-RD27757Drupal before 7
- Not ratedosv:CLEANSTART-2024-FK19349remote code execution vulnerability exists within multiple subsystems of Drupal 7
- Not ratedosv:CLEANSTART-2024-WW17035In Drupal 7 versions prior to 7
- Not ratedosv:CLEANSTART-2024-OJ63880Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL
- Not ratedosv:CLEANSTART-2024-SC89971Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities
- Not ratedosv:CLEANSTART-2024-AP37400Cross-site scripting vulnerability in Drupal Core
Other news entries
- NCSC-2026-0438 [1.00] [M/H] Kwetsbaarheden verholpen in Drupal Core en modules door DrupalNewsNCSC-NL
- Drupal patches critical RCE flaws, warns exploits may emerge soonNewsBleepingComputer
- Drupal Core, Gin Admin Theme und Entity List: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed ModulesNewsThe Hacker News
- Multiples vulnérabilités dans Drupal (15 octobre 2026)NewsCERT-FR (ANSSI)
- Drupal Erweiterungen: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Drupal Erweiterungen: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Drupal Core: Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
Source: https://www.securityweek.com/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/
ID