CVE-2026-9082 1

CVE-2026-9082: Drupal Core SQL Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 22, 2026

Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.

Vulnerabilities & Patching