Skip to content
Vulnerability intelligence

CVE-2026-108099: Entity List module remote code execution

Whether your site is exposed depends on the modules and custom code around Drupal core, not only on the version.

Drupal 2026
What WebPulse reported · 1 analysis
Drupal patches two code-execution flaws and says exploits may come fast

Whether your site is exposed depends on the modules and custom code around Drupal core, not only on the version.

October 18, 2026
View CVE-2026-108099 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-108097 CVE-2020-13671 CVE-2019-6340 CVE-2018-7602 CVE-2018-7600 CVE-2026-60137 CVE-2026-50549