Drupal Critical SQL Injection Flaw Exploited
NEOSEC enrichment — no mirror of the original source
A critical vulnerability in the Drupal content management system is being exploited in the wild, and the US Cybersecurity and Infrastructure Security Agency has added the flaw to its Known Exploited Vulnerabilities catalog (CISA KEV). CVE-2
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
Affected vendors and products
More on Injection
Other advisories
- MediumCVE-2026-88985Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
- MediumCVE-2026-63183OmniAuth: Host Header Injection Vulnerability
- MediumCVE-2026-123810Dynatrace-oss Dynatrace-mcp: SQL-Injection
- MediumCVE-2026-123809Dynatrace-oss Dynatrace-mcp: Template-Injection
- MediumCVE-2026-63497Titra: Injection
- HighCVE-2026-121769Axew3.com WP w3all phpBB: SQL-Injection
- MediumCVE-2026-84503Red Hat Migration Toolkit for Applications 8: Argument-Injection
- HighCVE-2026-121769Axew3.com WP w3all phpBB: SQL-Injection
Other news entries
- SuiteCRM: Schwachstelle ermöglicht SQL-InjectionVulnerabilityBSI CERT-Bund
- SuiteCRM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans les produits Foxit (06 novembre 2026)NewsCERT-FR (ANSSI)
- Sonatype Nexus Repository Manager: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- SonicWall GMS: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Snipe-IT: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Barracuda ESG Authentication Bypass Flaw Opens Path to RootNewsSecurityWeek
- Multiples vulnérabilités dans les produits SonicWall (04 novembre 2026)NewsCERT-FR (ANSSI)
Source: https://www.drupal.org/
ID