Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Drupal Patches Critical RCEs: CVE-2026-108097 & 108099
Excerpt
Drupal has patched two critical remote code execution (RCE) vulnerabilities affecting Drupal core and the contributed Entity List module. The first flaw, tracked CVE-2026-108097, affects the core Field UI module, while CVE-2026-108099 affects Entity List. Neither is directly exploitable through the affected component alone, but Drupal warns that multiple serious exploit paths exist through contributed modules or custom code , including at least one known path for each flaw…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-108099 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-108097 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…