Drupal Critical SQL Injection Flaw Exploited
NEOSEC enrichment — no mirror of the original source
A critical vulnerability in the Drupal content management system is being exploited in the wild, and the US Cybersecurity and Infrastructure Security Agency has added the flaw to its Known Exploited Vulnerabilities catalog (CISA KEV). CVE-2
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
Affected vendors and products
More on Injection
Other advisories
- MediumCVE-2026-125381SQL-Injection (CVE-2026-125381)
- MediumCVE-2026-88985Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
- CriticalCVE-2026-125120Automattic Mongoose: Injection in Datenabfragen
- HighCVE-2026-125119Automattic Mongoose: Injection in Datenabfragen
- CriticalCVE-2026-115934CraftCMS CMS: SQL-Injection
- CriticalCVE-2026-115934CraftCMS CMS: SQL-Injection
- CriticalCVE-2026-125120Automattic Mongoose: Injection in Datenabfragen
- HighCVE-2026-125119Automattic Mongoose: Injection in Datenabfragen
Other news entries
- SuiteCRM: Schwachstelle ermöglicht SQL-InjectionVulnerabilityBSI CERT-Bund
- SuiteCRM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans les produits Foxit (06 novembre 2026)NewsCERT-FR (ANSSI)
- Sonatype Nexus Repository Manager: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- SonicWall GMS: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Snipe-IT: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Barracuda ESG Authentication Bypass Flaw Opens Path to RootNewsSecurityWeek
- Multiples vulnérabilités dans les produits SonicWall (04 novembre 2026)NewsCERT-FR (ANSSI)
Source: https://www.drupal.org/
ID