Known Exploited Vulnerabilities May 22, 2026 · CISA KEV Catalog

CVE-2026-9082: Drupal Core SQL Injection Vulnerability

Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-9082 Drupal
Related: CVE-2018-7602: Drupal Core Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022
CVE-2019-6340: Drupal Core Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022
CVE-2020-13671: Drupal core Un-restricted Upload of File Known Exploited Vulnerabilities · Jan 18, 2022