Drupal's 19/25 Rating and CVE-2026-108099: Reconciling Module Risk With CVSS 8.1

Dev.to•Sat, Nov 7, 2026, 08:43 PM•2 min read

Drupal's 19/25 Rating and CVE-2026-108099: Reconciling Module Risk With CVSS 8. 1 Drupal rates the Entity List vulnerability as critical at 19 of 25. The CVE record lists CWE-470 and CVSS 3.

Source: [Dev.to](https://dev.to/kozhevniko/drupals-1925-rating-and-cve-2026-108099-reconciling-module-risk-with-cvss-81-1ll6)

📰 Read Full Story

This is an aggregated headline summary. For the complete report, visit the original publisher.

Continue Reading at Dev.to ↗

#tech #drupal #entity #list #cve #vulnerable #module #cvss #score

More Headlines

TechnologyDev.to• 5m ago

The AI Understood My Payment Request. My Rust Code Refused It.

An AI that can read "send 0. 05 SOL to Ada for lunch" is useful. An AI that can decide to send money is a liability.

TechnologyDev.to• 5m ago

osFoundry는 왜 Claude에게 GitNest push 대신 변경 제안만 시킬까

Claude 채팅이 osFoundry 를 거쳐 GitNest 저장소에 파일을 넣고 싶을 때 쓰는 tool이 이거다. osFoundry MCP 엔드포인트의 tools/list 는 인증 없이도 찔러 볼 수 있다. 2026-11-06에 curl로 받아 온 응답에서 해당 항목만 뽑았다.

TechnologyDev.to• 5m ago

Long-Form SEO Article: EP01 - Backstage vs Port (Substack / Dev.to / Medium)

Long-Form SEO Article: EP01 - Backstage vs Port (Substack / Dev. to / Medium) Target Canonical URL: Substack Newsletter ( controlplanelab. substack.

TechnologyDev.to• 6m ago

De la plasticité cérébrale au game design : pourquoi l'entraînement visuel doit devenir un jeu

De la plasticité cérébrale au game design : pourquoi l'entraînement visuel doit devenir un jeu Une étude récente rappelle quelque chose d'essentiel : à l'ouverture des yeux, le cerveau connaît une poussée de connexions qui affine en quelques jours les réponses visuelles. Autrement dit, l'expérie...

TechnologyDev.to• 6m ago

Cara memeriksa dengan Python bahwa teks yang disensor benar-benar hilang dari PDF

PDF yang sudah disensor bisa gagal dengan lebih banyak cara daripada sekadar "ada yang menggambar kotak hitam". Kotaknya bisa jadi bagian dari halaman atau berupa anotasi di atasnya, tanda redaksi bisa ditambahkan tapi tidak pernah diterapkan, redaksi bisa diterapkan lalu disimpan secara increme...

TechnologyDev.to• 7m ago

DTE workers that fit the work, and a footer that says how full they ran

On vx's own main branch, nine Linux workers ran 88% busy for one run. The footer prints that for every worker, every run. vx CI on GitHub runners, 160 tasks to run · 4a86e02 · 2026-11-07 · the run A Mac starts only for a Mac task dte ({ workers : { hosted : { machines : { small : { max : 9 , cp...