CVE-2026-108099

Vulnerability Description

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.

Related Weaknesses (CWE)

CWE-470

References

https://www.drupal.org/sa-contrib-2026-218

FAQ

What is CVE-2026-108099?

CVE-2026-108099 is a documented vulnerability. Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0....

How severe is CVE-2026-108099?

CVSS scoring is not yet available for CVE-2026-108099. Check NVD for updates.

Is there a patch for CVE-2026-108099?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.