## Drupal core - Critical - Remote code execution - SA-CORE-2026-014

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2026-108097
- 公開日時: 2026-10-14T16:10:00.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2026-014)
- パーマリンク: https://vulnpulse.app/items/drupal-security-5fc7ebf65800

Project: Drupal core Project machine name: drupal Date: 2026-October-14 Security risk: Critical 19 ∕ 25 AC:Basic/A:None/CI:All/II:All/E:Theoretical/TD:Default Vulnerability: Remote code execution Affected versions: >= 8.9.0 < 10.6.19 || >= 11.0.0 < 11.3.19 || >= 11.4.0 < 11.4.10 || >= 12.0.0-alpha1 < 12.0.0-beta2 CVE IDs: CVE-2026-108097 Description: A remote code execution vulnerability exists within the Field UI module in Drupal core. The vulnerability is not directly exploitable with core alone, but multiple serious exploit paths exist with contributed modules. At least one known exploit p…