CVE-2026-108097
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
CVSS score
—
EPSS probability
—
Risk score
—
Published
1 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Defensive, non-exploit detector for CVE-2026-108097 (SA-CORE-2026-014) — Drupal core Field UI RCE (★0)
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2018-7600 Actively exploiteddrupal: Unsanitized requests allow remote attackers to execute arbitrary code
Workaround Public Exploits:29EPSS %100
9.8
CVE-2019-6340 Actively exploiteddrupal: does not sanitize data from non-form sources leads to arbitrary PHP code execution
Workaround Public Exploits:16EPSS %92
9.8
CVE-2026-9082 Actively exploitedDrupal core - Highly critical - SQL injection - SA-CORE-2026-004
Patch verified Public Exploits:17EPSS %89
8.1
CVE-2018-7602 Actively exploitedDrupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
Patch verified Public Exploits:8EPSS %99
8.8
CVE-2020-13671 Actively exploiteddrupal: improper filename sanitization can lead to remote code execution
Workaround Public Exploits:3EPSS %36
6.1
CVE-2021-41184Cross-site scripting in Jqueryui Jquery UI
Patch verified Public Exploits:1EPSS %41
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-108097"