CVE-2026-9082 - Vulnerability Details

Related Threat Clusters

• Critical SQL Injection Vulnerability in Drupal Core Actively Exploited

  A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute…

  6 articles · Updated May 25, 2026
• Critical PostgreSQL Vulnerabilities Enable Remote Code Execution and SQL Injection

  PostgreSQL has released security updates addressing multiple high-risk vulnerabilities that could lead to remote code execution (RCE) and SQL injection attacks. The updates, available in versions 18.4, 17.10, 16.14,…

  35 articles · Updated May 19, 2026

Recent Intelligence Reports

• Critical Vulnerability in Drupal Core — Csa.Sg · May 26, 2026
• CISA Warns Drupal Core SQL Injection Vulnerability Is Being Exploited in Attacks — Gbhackers · May 25, 2026
• CISA Warns of Drupal Core SQL Injection Vulnerability Exploited in Attacks — Cybersecuritynews · May 25, 2026
• Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV — Thehackernews · May 23, 2026
• Warning: Drupal Core is affected by a Critical SQL Injection Vulnerability, Patch Immediately! — Ccb.Belgium.Be · May 22, 2026
• CVE-2026-9082: Highly Critical SQL Injection Vulnerability in Drupal Core (SA-CORE-2026-004) — Tenable · May 21, 2026

Related Entities