Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

Image for article Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
News Source : Internet

News Summary

  • The vulnerability in question is CVE-2026-9082 (CVSS score: 6.5), an SQL injection vulnerability affecting all supported versions of Drupal Core.
  • Federal Civilian Executive Branch (FCEB) agencies have been recommended to apply the fixes by May 27, 2026, for optimal protection.
The U.S.

Must read Articles