Drupal fixes critical Field UI flaw with unauthenticated code execution path
Drupal patched CVE-2026-108097, a critical remote code execution flaw in the core Field UI module that contributed modules can expose without authentication.
#Field UI
Cybersecurity news about “Field UI”.