Vendor
Drupal
- CVEs tracked · all time
- 1
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 0
- articles · all time
- 8
No articles in the last 45 daysThe latest: SecurityOnline, Mon 25 May, 10:32 UTC.See the full timeline
Products: Core
CVEs
1 CVE- Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running TyposquatSecurityOnline
- Drupal SQL Injection Bug Exploited Live, Extortion Tactics SurgeSecurity Affairs
- CISA adds Drupal SQL flaw CVE-2026-9082 to KEV catalogueSecurity Affairs
- Critical Drupal SQLi flaw exposes thousands of PostgreSQL sitesSecurity Affairs
- CISA Flags Drupal SQL Injection Flaw CVE-2026-9082 in KEV CatalogCISA · official notice
- Drupal Core Critical Flaw CVE-2026-9082 Allows RCECISA · official notice
- Drupal Critical SQL Flaw CVE-2026-9082 Prompts Urgent PatchSecurityWeek
- Drupal patches PostgreSQL SQL injection flaw CVE-2026-9082SecurityWeek · first in our coverage