Security News Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules TheHackerNews Daniel Bender 15 Oct 2026 Share Drupal patched a critical Field UI RCE flaw reachable through contributed modules, including one known path that requires no login.
