Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

A critical SQL injection vulnerability in Drupal Core (CVE-2026-9082) has been added to CISA's Known Exploited Vulnerabilities catalog following active exploitation.

• •The vulnerability allows privilege escalation and remote code execution through specially crafted database API requests
• •Exploitation began within 2 days of patch release, with over 15,000 attack attempts detected on approximately 6,000 sites
• •Primary targets are gaming and financial services sectors across 65 countries
• •Current attack activity is predominantly reconnaissance and validation of vulnerable PostgreSQL-backed Drupal installations
• •Federal agencies must apply patches by May 27, 2026

This summary was automatically generated by AI based on the original article and may not be fully accurate.