Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEVThe Hacker News·May 23, 13:25 UTC · May 23, 2026Exploit / PoC in the wildCVE-2026-908260
U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 24, 07:54 UTC · May 24, 2026Exploit / PoC in the wildCVE-2026-908260
Exploit in the Wild: #drupalgeddon2 - Analysis of CVE-2018Palo Alto Unit 42·Jan 28, 21:25 UTC · Jan 28, 2022Exploit / PoC in the wildCVE-2018-760060
Recently disclosed Drupal CVE-2019Security Affairs·Feb 26, 22:06 UTC · Feb 26, 2019Exploit / PoCCVE-2019-634060
Network Attack Trends: Internet of Threats (November 2020Palo Alto Unit 42·Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2020-28188CVE-2020-17519CVE-2020-29227+62 CVEs60
May 2026 CVE LandscapeRecorded Future·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+19 CVEs60
US CISA added 17 flaws to its Known Exploited Vulnerabilities CatalogSecurity Affairs·Jan 23, 18:13 UTC · Jan 23, 2022Exploit / PoC in the wildCVE-2021-32648CVE-2021-21315CVE-2021-21975+14 CVEs160
Drupal addressed the critical CVE-2018Security Affairs·Mar 29, 12:24 UTC · Mar 29, 2018Exploit / PoCCVE-2018-7600CVE-2014-370460
Crypto Me0wing attacks: Kitty cashes in on MoneroHelp Net Security·Jun 26, 21:20 UTC · Jun 26, 2018Exploit / PoCCVE-2018-760060
Hackers continue to exploit the Drupalgeddon2 flaw in attacks in the wildSecurity Affairs·Oct 8, 05:32 UTC · Oct 8, 2019Exploit / PoCCVE-2018-760060
Experts are observing Drupalgeddon2 (CVE-2018Security Affairs·Apr 19, 04:02 UTC · Apr 19, 2018Exploit / PoCCVE-2018-7600CVE-2017-1027160
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under AttackThe Hacker News·Apr 26, 12:32 UTC · Apr 26, 2018Exploit / PoC in the wildCVE-2018-7602CVE-2018-760060
Over 115,000 Drupal Sites still vulnerable to Drupalgeddon2, a gift to crooksSecurity Affairs·Jun 5, 06:56 UTC · Jun 5, 2018Exploit / PoCCVE-2018-760060
ZDI offers hefty bounties for zero-days in popular web servers, CMSesHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2018Exploit / PoC60
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever ShippedThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-24990CVE-2025-59230CVE-2025-47827+5 CVEs160
Multiple Code Execution Flaws Found In PHP Programming LanguageThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2019Exploit / PoC in the wildCVE-2019-1322460
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security UpdateThe Hacker News·Jan 21, 15:30 UTC · Jan 21, 2025Exploit / PoC in the wildCVE-2024-7344CVE-2025-21333CVE-2025-21334+13 CVEs60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two ZeroThe Hacker News·Dec 10, 15:09 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62223CVE-2025-62221CVE-2025-54100+6 CVEs60