Back to article

Highly critical - SQL injection - SA-CORE-2026-004 (opens in new tab)

Covered by 20 sources including BleepingComputer, SecurityWeekDiscussed on Hacker News

Covered in 24 articles

BleepingComputer·

Drupal: Critical SQL injection flaw now targeted in attacks

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking

thehackernews.com·

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

thehackernews.com·

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

Malware Analysis, News and Indicators·

Drupal security advisory (AV26-492)

LeakWatch 2026, security incidents, data breaches and IT situation for the current calendar week 21 – Pentecost, fake voices and the question of whom to still t...

Security Affairs·

U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog

Security Affairs·

CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack

csoonline.com·

Drupal admins rushing to patch maximum severity SQL injection vulnerability

In other languages

Jetzt patchen! Angreifer nutzen kritische Schadcode-Lücke in Drupal aus

lemondeinformatique.fr·

Une faille critique empoisonne les administrateurs Drupal

Drupal corrige falha crítica já atacada

Borns IT- und Windows-Blog·

Drupal schließt kritische Schwachstelle CVE-2026-9082 im Core (20.5.2026)