tocsin

CVE-2026-108097

1 advisory.

Packagist/drupal/core CVE-2026-108097: unknown

A remote code execution vulnerability exists within the Field UI module in Drupal core.

Action: Upgrade drupal/core to 10.6.19 or later.

composer require drupal/core:10.6.19
composer require drupal/core:11.3.19
composer require drupal/core:11.4.10
composer require drupal/core:12.0.0-beta2

Affected

introducedfixedlast affected
8.9.010.6.19-
11.0.011.3.19-
11.4.011.4.10-
12.0.0-alpha112.0.0-beta2-

Fixed versions

10.6.1911.3.1911.4.1012.0.0-beta2

Sources

CVE-2026-108097 · published · modified · JSON