CVE-2026-108097 Deep Dive: Turning a Drupal Field UI Callback Into RCE - FORTBRIDGE
fortbridge.co.uk
CVE-2026-108097: how a Drupal Field UI callback led to file disclosure and RCE in a paired lab. The contributed-module writer remains unverified.