CISA
CISA Flags Drupal SQL Injection Flaw CVE-2026-9082 in KEV Catalog
The Known Exploited Vulnerabilities (KEV) Catalog is maintained by CISA to aid cybersecurity professionals in managing and prioritizing vulnerabilities that have been actively exploited. The catalog serves as a resource for organizations to enhance their vulnerability management strategies. It includes detailed information on specific vulnerabilities, such as CVE-2026-9082, a SQL injection vulnerability in Drupal Core that could lead to privilege escalation and remote code execution.
The catalog is accessible in multiple formats (CSV, JSON) and includes a section for user submissions of additional vulnerabilities. Users can subscribe for updates on the latest entries in the KEV Catalog.
Story timeline CVE-2026-9082
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 21 May · 11:01 UTC | SecurityWeek | Drupal patches PostgreSQL SQL injection flaw CVE-2026-9082 |
| Fri 22 May · 17:32 UTC | SecurityWeek | Drupal Critical SQL Flaw CVE-2026-9082 Prompts Urgent Patch |
| Fri 22 May · 19:31 UTC | CISA | Drupal Core Critical Flaw CVE-2026-9082 Allows RCE |
| Fri 22 May · 23:05 UTC | CISA | CISA Flags Drupal SQL Injection Flaw CVE-2026-9082 in KEV Catalog (this article) |
| Sat 23 May · 17:30 UTC | Security Affairs | Critical Drupal SQLi flaw exposes thousands of PostgreSQL sites |
| Sun 24 May · 08:31 UTC | Security Affairs | CISA adds Drupal SQL flaw CVE-2026-9082 to KEV catalogue |
| Sun 24 May · 12:31 UTC | Security Affairs | Drupal SQL Injection Bug Exploited Live, Extortion Tactics Surge |
| Mon 25 May · 10:32 UTC | SecurityOnline | Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat |