UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-108097

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.

Properties

Last source: AlienVault OTX
Nvd fetched at: 2026-10-30T07:58:06.356713+00:00
Cve id: CVE-2026-108097
First seen by Signal: 2026-10-22T14:08:43+00:00
Name: CVE-2026-108097
Retrieved at: 2026-10-30T07:59:59+00:00
Published at: 2026-10-30T04:18:04.130
Last modified: 2026-10-30T04:18:04.130

Related Entities (2)

HAS_WEAKNESS (1)

→[Weakness]Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

MENTIONED_IN (1)

→[Campaign]INC and The Gentlemen Ransomware: Exposed AI Infrastructure

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop