SecurityThe Hacker Newsabout 1 hour ago
Drupal Patches Critical RCE Flaw
4 min read
Drupal core fixed a critical remote code execution flaw on October 14 via updates to versions 11.4.10, 11.3.19, and 10.6.19. The vulnerability, tracked as CVE-2026-108097, allows attackers to run code without login through contributed modules. Approximately 28.5% of 531,499 tracked sites were affected in the week starting October 4, with 151,442 sites lacking a fix.
Level
Hype check
Tap to vote and see what everyone thinks.
