CVE-2026-108097

{
  "etk_id": "ETK-2026-1987",
  "cve_id": "CVE-2026-108097",
  "display_id": "CVE-2026-108097",
  "ghsa_id": null,
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Remote code execution in Drupal Field UI",
  "summary": "Drupal core installations using Field UI may be exposed to remote code execution through affected contributed-module integrations. An attacker may be able to exploit the issue without logging in; the supplied evidence does not identify the exact module or release prerequisites.",
  "mitigation": "Apply the update specified in Drupal advisory SA-CORE-2026-014 after confirming the affected module configuration. Until patched, disable Field UI or the relevant contributed-module integration where operationally feasible.",
  "vendor": "Drupal",
  "product": "Drupal core's Field UI component",
  "affected": [],
  "cwes": null,
  "cvss_score": 9,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 56.90923863333333,
  "t0_at": null,
  "signals": {
    "check": {
      "at": "2026-10-18T16:32:42.727935+00:00",
      "days": -2.4393279683217592,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T03:05:20.836781+00:00",
      "url": null
    },
    "public_poc": {
      "at": "2026-10-18T11:27:54+00:00",
      "days": -2.651003060162037,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T03:05:20.836781+00:00",
      "url": "https://github.com/fortbridge/cve-2026-108097-research"
    },
    "trigger_signal": {
      "at": "2026-10-15T12:07:20+00:00",
      "days": -5.623618800902777,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T03:05:20.836781+00:00",
      "url": "https://thehackernews.com/2026/10/drupal-patches-critical-core-rce-flaw.html"
    }
  }
}