type: cve · created: 2026-10-31 · updated: 2026-10-31 · tags: [cve] · confidence: medium · severity: medium · affected_sectors: [global] · au_impact: false
The flaw arrives weeks after Drupal patched two critical RCE issues (CVE-2026-108097 and CVE-2026-108099) and warned exploits could emerge within days.
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-108099 |
| CVSS | TODO: verify |
| Vendor / product | Drupal |
| Reported | 2026-10-31 |