Drupal
In 9 briefs, most recently 30 October 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
5 Drupal vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 2 of them used in ransomware campaigns. Most recent:
- CVE-2026-9082 Drupal Core SQL Injection Vulnerability
- CVE-2018-7602 Drupal Core Remote Code Execution Vulnerability
- CVE-2019-6340 Drupal Core Remote Code Execution Vulnerability
- CVE-2020-13671 Drupal core Un-restricted Upload of File
- CVE-2018-7600 Drupal Core Remote Code Execution Vulnerability
Coverage in DanSec Daily
- Binance's $6.3B heist tied to TraderTraitor, Polymarket supply-chain hack, and critical CVEs in GitLab and Cisco SD-WAN exploited in the wild.
- OVHcloud CLI and Rank Math PRO supply chain compromises, the Ahold Delhaize cyberattack, and actively exploited Plex2Shell flaws.
- ConnectWise suspends Cloud Backup after Microsoft 365 tenant breaches; Drupal patches two critical RCE flaws; AI security hiring rises.
- Covers the UK Legal Aid Agency and CenterPoint Energy breaches, Ivanti and Cisco zero-days under exploitation, and GhostAction compromising about 1,900 GitHub …
- Charter Communications and 7-Eleven breaches by ShinyHunters, a 5,500-repo GitHub compromise via Megalodon malware, and a SharePoint zero-day patch from …
- Cloud Atlas and Ghostwriter espionage, Megalodon GitHub commit campaign, and First VPN takedown, plus actively exploited LiteSpeed cPanel and Drupal flaws.
- Kimwolf botmaster arrested, GitHub breach via malicious VS Code extension, and Grafana repo theft via TanStack supply chain attack.
- GitHub breach via a compromised Nx Console extension, Microsoft's takedown of the Fox Tempest malware-signing service, and SonicWall SSL-VPN MFA bypasses in …
- GitHub internal repos breached via malicious VS Code extension; Grafana Labs source code breach via npm supply-chain attack; 7-Eleven ShinyHunters breach.