PHP 8.6 has reached RC3, giving Drupal teams another pre-release checkpoint for compatibility testing. The story looks at where Drupal support stands and what developers should verify before PHP 8.6 reaches stable.

PHP 8.6 has reached RC3, giving Drupal teams another pre-release checkpoint for compatibility testing. The story looks at where Drupal support stands and what developers should verify before PHP 8.6 reaches stable.
#Drupal module release: searchstax 1.14.0 (2026-10-15) #PHP. See https://www.drupal.org/project/searchstax/releases/1.14.0
#Drupal module release: a12s_locations 1.0.0-rc11 (2026-10-15) #PHP. See https://www.drupal.org/project/a12s_locations/releases/1.0.0-rc11
Drupal has issued five October 2026 security advisories, including a critical remote code execution vulnerability in core. Site owners should review affected versions and apply the recommended updates promptly.
Akismet 1.1.0 adds webhook security improvements and a one-way migration path from older Drupal integrations. Teams upgrading should review the migration carefully because the move is not designed to roll back.
#Drupal module release: ai_validations 1.4.0 (2026-10-15) #PHP. See https://www.drupal.org/project/ai_validations/releases/1.4.0
#Drupal module release: tmgmt_laratranslate 2.0.0-beta5 (2026-10-15) #PHP. See https://www.drupal.org/project/tmgmt_laratranslate/releases/2.0.0-beta5
#Drupal module release: menu_warm_cache 1.0.2 (2026-10-15) #PHP. See https://www.drupal.org/project/menu_warm_cache/releases/1.0.2
#Drupal module release: tmgmt_laratranslate 2.0.0-beta6 (2026-10-15) #PHP. See https://www.drupal.org/project/tmgmt_laratranslate/releases/2.0.0-beta6
Drupal fixes a critical remote code execution vulnerability in its Field UI module tracked as CVE-2026-108097.
Over 150,000 reporting sites were on unsuppor…
#Drupal module release: entity_to_text 1.3.4 (2026-10-15) #PHP. See https://www.drupal.org/project/entity_to_text/releases/1.3.4
#Drupal module release: embedded_attribution 1.0.0-alpha1 (2026-10-15) #PHP. See https://www.drupal.org/project/embedded_attribution/releases/1.0.0-alpha1
#Drupal module release: image_styles_builder 1.1.9 (2026-10-15) #PHP. See https://www.drupal.org/project/image_styles_builder/releases/1.1.9
#Drupal module release: vercel_deploy 1.3.4 (2026-10-15) #PHP. See https://www.drupal.org/project/vercel_deploy/releases/1.3.4
The October 14 Drupal Core Security Release: What to Do Today
A critical Drupal core security release was scheduled for Wednesday, October 14, 2026, between 16:00 and 21:00 UTC, which is…
http://digitalmatters.me/security/drupal-core-security-release-october-14/
#Drupal module release: orchestra 1.0.0-alpha22 (2026-10-15) #PHP. See https://www.drupal.org/project/orchestra/releases/1.0.0-alpha22
#Drupal module release: flowdrop 2.7.0-alpha4 (2026-10-15) #PHP. See https://www.drupal.org/project/flowdrop/releases/2.7.0-alpha4
#Drupal distribution release: sobki_profile_bootstrap 11.0.12 (2026-10-15) #PHP. See https://www.drupal.org/project/sobki_profile_bootstrap/releases/11.0.12
New #Drupal module: Login Paths (2026-10-15) #PHP. See https://www.drupal.org/project/login_paths
New #Drupal module: Consumer Node Preview (2026-10-15) #PHP. See https://www.drupal.org/project/consumer_node_preview