Drupal Critical SQL Injection Flaw Exploited
NEOSEC enrichment — no mirror of the original source
A critical vulnerability in the Drupal content management system is being exploited in the wild, and the US Cybersecurity and Infrastructure Security Agency has added the flaw to its Known Exploited Vulnerabilities catalog (CISA KEV). CVE-2
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
Affected vendors and products
More on Injection
Other advisories
- HighCVE-2026-123990DataEase: SQL-Injection
- HighCVE-2026-123990DataEase: SQL-Injection
- CriticalCVE-2026-120984Red Hat Build of Keycloak: Code-Injection
- CriticalCVE-2026-120984Red Hat Build of Keycloak: Code-Injection
- Not ratedCVE-2026-121265SQL-Abstract: SQL-Injection
- HighCVE-2026-116751Amelia Booking for Appointments and Events Calendar: SQL-Injection
- MediumCVE-2026-103914WPVibes Dynific Addons for Elementor (formerly Anywhere Elementor): SQL-Injection
- MediumCVE-2026-102564WPVibes Dynific Addons for Elementor (formerly Anywhere Elementor): Code-Injection
Other news entries
- SuiteCRM: Schwachstelle ermöglicht SQL-InjectionVulnerabilityBSI CERT-Bund
- SuiteCRM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans les produits Foxit (06 novembre 2026)NewsCERT-FR (ANSSI)
- Sonatype Nexus Repository Manager: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- SonicWall GMS: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Snipe-IT: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Barracuda ESG Authentication Bypass Flaw Opens Path to RootNewsSecurityWeek
- Multiples vulnérabilités dans les produits SonicWall (04 novembre 2026)NewsCERT-FR (ANSSI)
Source: https://www.drupal.org/
ID