CISA Warns Drupal Core SQL Injection Vulnerability Is Being Exploited in Attacks

Gbhackers •Divya • May 25, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical SQL injection vulnerability in Drupal Core, tracked as CVE-2026-9082, which is now being actively exploited in the wild. The flaw has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling a high risk to organizations using affected Drupal deployments. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection Vulnerability in Drupal Core Actively Exploited A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary SQL queries, leading to potential information disclosure and privilege escalation. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that this flaw is being actively exploited in the wild and has added it to its Known Exploited Vulnerabilities (KEV) catalog. Users of affected Drupal versions are urged to update immediately to the latest patched versions to mitigate risks. The vulnerability impacts Drupal core versions from 8.9.0 to 11.3.10. CISA's alert emphasizes the urgency of addressing this flaw to protect organizations from potential attacks. 6 sources 80

Extracted Entities

CISA Warns Drupal Core SQL Injection Vulnerability Is Being Exploited in Attacks

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)