Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal released security updates addressing two critical remote code execution vulnerabilities affecting all supported versions of the CMS. The vendor warns that exploits may be developed soon, though no active exploitation has been confirmed. This is a significant risk for the large installed base of Drupal websites, potentially enabling full site compromise.