Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
Drupalgeddon
Vulnerability
Threat entity extracted from intelligence sources
Entities
›
vulnerability
›
Drupalgeddon
Frequency
2
occurrences
First Seen
May 21, 2026
Last Seen
October 8, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
Sea Turtle
Related CVEs
CVE-2026-9082
MITRE Techniques
T1557 - Adversary-in-the-Middle
T1566.001 - Spearphishing Attachment
Affected Platforms
Drupal
PostgreSQL
Sectors Affected
Energy
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
1
IA
Initial Access
T1566.001 - Spearphishing Attachment
-
EX
Execution
No techniques detected
-
PE
Persistence
No techniques detected
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
-
EX
Exfil
No techniques detected
-
IM
Impact
No techniques detected
2
techniques detected across
1
tactics
Related Clusters (1)
Cisco Talos Reports Ongoing Sea Turtle DNS Hijacking Campaign
Oct 8
·
0 sources
60
Related Articles (2)
Cisco Talos reported
blog.talosintelligence.com
·
Oct 8
CVE-2026-9082: Highly Critical SQL Injection Vulnerability in Drupal Core (SA-CORE-2026-004)
Tenable
·
May 21
Related Entities
Sea Turtle
Man-in-the-Middle
Phishing
Sql Injection
CVE-2026-9082
CWE-22 - Path Traversal
CWE-287 - Improper Authentication
CWE-89 - SQL Injection
CWE-94 - Code Injection
Energy
T1557 - Adversary-in-the-Middle
T1566.001 - Spearphishing Attachment