MSRXMSRXSecurity
Vendors / Drupal

Drupal vulnerabilities being exploited

1 Drupal flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Core. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-05-22CVE-2026-9082 Core
Drupal Core SQL Injection Vulnerability

Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.

2026-05-27
Watch my Drupal softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.