#drupal


CISA orders feds to patch actively exploited Drupal vulnerability

May 27, 2026 // 00:39

CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) […]

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

May 23, 2026 // 10:49

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) […]

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

May 23, 2026 // 10:46

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) […]

Drupal: Critical SQL injection flaw now targeted in attacks

May 22, 2026 // 16:16

Drupal is warning that hackers are attempting to exploit a “highly critical” SQL injection vulnerability announced earlier this week. The content management system (CMS) project […]

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

May 21, 2026 // 10:26

Drupal has released security updates for a “highly critical” security vulnerability in Drupal Core that could be exploited by attackers to achieve remote code execution, […]

Drupal critical update to fix bug with high exploitation risk

May 20, 2026 // 15:56

Drupal has announced a “core security release” scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure. Administrators […]

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

May 19, 2026 // 13:54

Drupal has issued an alert stating that it intends to release a “core security release” for all supported branches on May 20, 2026, from 5-9 […]