Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
CISA added actively exploited Drupal Core SQL injection flaw CVE-2026-9082 to its KEV catalog.
CISA added CVE-2026-9082, a Drupal Core SQL injection vulnerability, to its KEV catalog due to active exploitation. Imperva observed over 15,000 attack attempts targeting nearly 6,000 sites across 65 countries, primarily probing PostgreSQL-backed configurations.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Drupal?
Get an email when a new story names Drupal, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-9082