Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
Drupal patches critical RCE flaws, warns exploits may emerge soon
Summary + source link. No paywalls, no tracking.