// tag
Drupal
Security incidents tagged Drupal. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 Drupal incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
May 2026 1
highDrupal Core: Drupal Core SQL Injection Vulnerabilitypatched
› Drupal Core patched
Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API. Added to CISA KEV on 2026-05-22.
open incident →CVE-2026-9082
