CVE-2026-9082

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 21, 2026

Last Seen

October 24, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability in Drupal Core Actively Exploited80.3

A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary SQL queries, leading to potential information disclosure and privilege...

AI-Driven Ransomware Ecosystem Exposed by INC and The Gentlemen Affiliates72.6

Researchers from SOCRadar uncovered an AI-driven intrusion ecosystem linked to the INC and The Gentlemen ransomware groups, utilizing a framework called Phantom. The operation exploited vulnerabilities in public-facing edge devices, including FortiClient EMS, SimpleHelp, and cPanel, affecting at lea...

Critical PostgreSQL Vulnerabilities Enable Remote Code Execution and SQL Injection72.0

PostgreSQL has released security updates addressing multiple high-risk vulnerabilities that could lead to remote code execution (RCE) and SQL injection attacks. The updates, available in versions 18.4, 17.10, 16.14, 15.18, and 14.23, fix eleven vulnerabilities, including CVE-2026-6473, CVE-2026-6475...