{
  "meta": {
    "version": "v1",
    "pricing": {
      "public": {
        "label": "Public",
        "description": "Read-only API access for lightweight status checks and public integrations."
      },
      "premium": {
        "label": "Premium",
        "description": "API keys with higher hourly quotas, plus Slack, Teams, Discord, webhook, and email outage alerts across your vendor stack."
      }
    },
    "generatedAt": "2026-10-15T02:13:25.672Z"
  },
  "data": {
    "id": "incident_statuspage_pantheon_wjsz8xpqkd4g",
    "slug": "pantheon-drupal-core-critical-security-update-cve-2026-108097-2026-10-14",
    "title": "Drupal core critical security update (CVE-2026-108097)",
    "summary": "Drupal core critical security update (CVE-2026-108097)",
    "status": "monitoring",
    "stale": false,
    "severity": "minor",
    "startedAt": "2026-10-14T17:52:54+00:00",
    "updatedAt": "2026-10-14T22:51:07.902+00:00",
    "resolvedAt": null,
    "provider": {
      "slug": "pantheon",
      "name": "Pantheon"
    },
    "affectedServices": [
      {
        "slug": "pantheon-sites",
        "name": "Customer Sites"
      }
    ],
    "links": {
      "html": "/incidents/pantheon-drupal-core-critical-security-update-cve-2026-108097-2026-10-14",
      "api": "/api/v1/incidents/pantheon-drupal-core-critical-security-update-cve-2026-108097-2026-10-14",
      "providerHtml": "/providers/pantheon",
      "alerts": "https://outagedeck.com/account?stack=pantheon&utm_source=api&utm_medium=response&utm_campaign=api_alerts&utm_content=incident"
    },
    "impactSummary": "Pantheon reported this event with no impact level.",
    "source": {
      "id": "source_pantheon_status",
      "kind": "official_api",
      "name": "Pantheon Operations Status",
      "checkedAt": "2026-10-15T02:10:14.869+00:00",
      "stale": false,
      "officialUrl": "https://status.pantheon.io",
      "statusPageUrl": "https://status.pantheon.io"
    },
    "updates": [
      {
        "id": "update_statuspage_pantheon_wjsz8xpqkd4g_14y0l25zw7bn",
        "status": "monitoring",
        "body": "A <a href=\"https://www.drupal.org/sa-core-2026-014\">Drupal core security release</a> is now available for <strong>CVE-2026-108097</strong> (risk 19/25). It fixes a critical remote code execution vulnerability in the Field UI module.<br>Drupal core alone is not directly exploitable, but several exploit paths exist through contributed modules, including at least one path that does not require authentication. Custom code can also expose the vulnerable functionality.\n\n<h5>Action required</h5>\nUpdate your Drupal sites to a patched release as soon as possible:\n<strong>Drupal 11.4.10</strong>\n<strong>Drupal 11.3.19</strong>\n<strong>Drupal 10.6.19</strong>\n\nDrupal 12.0.0-alpha1 through 12.0.0-beta1 are also affected. See the <a href=\"https://www.drupal.org/sa-core-2026-014\">Drupal security advisory</a> for Drupal 12 remediation details.\nDrupal 11.2.x and earlier, Drupal 10.5.x and earlier, Drupal 9, and Drupal 8.9 are end-of-life. These versions are affected and do not receive security patches. Upgrade sites on these versions to a supported Drupal release.\n\nTo apply the update, use the Drupal core update workflow in the Pantheon Dashboard. See the <a href=\"https://docs.pantheon.io/release-notes/2026/10/drupal-core-security-update\">Pantheon security release note</a> for instructions.\n\n<h5>Mitigation until you update</h5>\nIf you cannot update immediately, uninstall the core Field UI module (<code>field_ui</code>). \nThe Drupal Security Team states that this protects your site until you update.\n\nAs a founding Platform Partner of the <a href=\"https://new.drupal.org/steward\">Drupal Steward program</a>, Pantheon provides protection against some known attack vectors. Drupal Steward does not cover all possible exploits, so it does not replace updating your site.",
        "createdAt": "2026-10-14T17:52:54.923+00:00"
      },
      {
        "id": "update_statuspage_pantheon_wjsz8xpqkd4g_2y6x324c6cgb",
        "status": "monitoring",
        "body": "We are aware of the Drupal 7 release and will update this incident when it is available as an upstream update.",
        "createdAt": "2026-10-14T19:49:44.369+00:00"
      },
      {
        "id": "update_statuspage_pantheon_wjsz8xpqkd4g_sd7fz16pfwcx",
        "status": "monitoring",
        "body": "Drupal 7.107 is now available as an upstream update. \n\nCustomers running Drupal 7 applications should update to Drupal 7.107 as soon as possible. \nTo apply the update, use the Drupal core update workflow in the Pantheon Dashboard.",
        "createdAt": "2026-10-14T20:51:04.965+00:00"
      }
    ],
    "access": {
      "plan": "public",
      "keyed": false
    }
  }
}