Search: “Drupal”

120 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 120 Exploit / PoC 32 Malware 24 Ransomware 17 Threat actor 7 Data breach 7 Phishing & fraud 1 Advisory 1

SeverityAll critical 143 high 32 medium 30 low 4 info 0

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

The Hacker NewsMay 22, 05:30 UTC · May 22, 2026Vulnerability CVE-2026-9082

60

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

The Hacker NewsMay 20, 14:40 UTC · May 20, 2026Vulnerability

30

Drupal emergency updates fix critical arbitrary PHP code execution

Security AffairsNov 27, 22:55 UTC · Nov 27, 2020Vulnerability CVE-2020-28948 CVE-2020-28949 CVE-2020-13671

60

Drupal Releases Core CMS Updates to Patch Several Vulnerabilities

The Hacker NewsApr 17, 21:51 UTC · Apr 17, 2019Vulnerability in the wildCVE-2019-10909 CVE-2019-10910 CVE-2019-1091

60

Drupal addressed several vulnerabilities in Drupal 8 and 7

Security AffairsFeb 23, 07:31 UTC · Feb 23, 2018Vulnerability

55

Drupal Warns Web Admins to Update CMS Sites to Patch a Critical Flaw

The Hacker NewsDec 19, 14:42 UTC · Dec 19, 2019Vulnerability

55

A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28th

Security AffairsMar 23, 07:52 UTC · Mar 23, 2018Vulnerability

55

Drupal is rolling out an emergency security update on May 20. You cannot miss it

Security AffairsMay 19, 19:30 UTC · May 19, 2026Vulnerability in the wild

60

Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last Week

The Hacker NewsFeb 26, 13:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2019-6340

60

Another Critical Flaw in Drupal Discovered — Update Your Site ASAP!

The Hacker NewsFeb 21, 10:18 UTC · Feb 21, 2019Vulnerability CVE-2019-6340

60

Acquia renews Drupal Steward Program support to address always-evolving security risks

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2021Vulnerability

55

Drupal under attack due to a critical SQL injection flaw

Security AffairsMar 29, 12:08 UTC · Mar 29, 2018Vulnerability CVE-2014-3704

60

Critical vulnerability in Drupal References Module opens 120,000 Sites to hack

Security AffairsJun 22, 19:55 UTC · Jun 22, 2017Vulnerability CVE-2014-3704

60

Drupal addressed several issues, including a critical file processing bug

Security AffairsDec 19, 21:19 UTC · Dec 19, 2019Vulnerability

55

CVE-2019-6340 Critical flaw in Drupal allows Remote Code Execution

Security AffairsFeb 21, 09:32 UTC · Feb 21, 2019Vulnerability CVE-2019-6340

60

CVE-2018-14773 Symfony Flaw expose Drupal websites to hack

Security AffairsAug 3, 14:08 UTC · Aug 3, 2018Vulnerability CVE-2018-14773

35

CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flaw

Security AffairsApr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602 CVE-2018-7600 CVE-2017-10271

60

Drupal maintainers fix several access bypass vulnerabilities in Drupal 8

Security AffairsAug 17, 15:58 UTC · Aug 17, 2017Vulnerability CVE-2017-6925 CVE-2017-6924 CVE-2017-6923

60

Drupal flaw allows reset password by crafting specific URLs

Security AffairsMar 20, 07:26 UTC · Mar 20, 2015Vulnerability

55

Drupal fixes three vulnerabilities, including one RCE

Help Net SecuritySep 18, 09:34 UTC · Sep 18, 2024Vulnerability CVE-2020-13663 CVE-2020-13664 CVE-2020-13665

60

Drupal fixes 2 critical code execution issues flaws in Drupal 7, 8.5 and 8.6

Security AffairsJan 17, 12:39 UTC · Jan 17, 2019Vulnerability CVE-2018-10008881

60

New Drupal RCE vulnerability under active exploitation, patch ASAP!

Help Net SecurityApr 26, 00:00 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602 CVE-2018-7600

60

CVE-2026-9082: Drupal's Highly Critical SQL Injection Flaw Is Already Under Active Attack

Security AffairsMay 23, 16:17 UTC · May 23, 2026Vulnerability in the wildCVE-2026-9082

60

Another Critical Flaw Found In Drupal Core—Patch Your Sites Immediately

The Hacker NewsApr 19, 07:24 UTC · Apr 19, 2018Vulnerability

55

Drupal fixes the CVE-2017

Security AffairsJun 22, 20:17 UTC · Jun 22, 2017Vulnerability CVE-2017-6922 CVE-2017-6920 CVE-2017-6921

60

Drupal-based sites open to attack via double extension files (CVE-2020-13671)

Help Net SecurityNov 25, 07:22 UTC · Nov 25, 2020Vulnerability in the wildCVE-2020-13671

60

Drupal patched security vulnerabilities in Symfony, jQuery

Security AffairsApr 18, 14:01 UTC · Apr 18, 2019Vulnerability CVE-2019-10910 CVE-2019-10911 CVE-2019-10909

60

Drupal version 8.2.7 address multiple vulnerabilities in the current version of the popular CMS

Security AffairsMar 16, 15:01 UTC · Mar 16, 2017Vulnerability CVE-2017-6377 CVE-2017-6379 CVE-2017-6381

60

Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

The Hacker NewsApr 26, 11:04 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7600 CVE-2018-7602

60

Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2018Vulnerability CVE-2018-7600

60

Out-of-band Drupal security updates fix bugs with known exploits

Help Net SecurityNov 27, 00:00 UTC · Nov 27, 2020Vulnerability CVE-2020-28948 CVE-2020-28949 CVE-2020-13671

60

Drupal addresses two XSS flaws by updating the CKEditor

Security AffairsMar 20, 08:31 UTC · Mar 20, 2020Vulnerability

55

Drupal releases security updates to fix four vulnerabilities in versions 7, 8

Security AffairsNov 18, 07:07 UTC · Nov 18, 2016Vulnerability CVE-2014-3704

60

Drupal addressed XSS and information disclosure flaws

Security AffairsSep 17, 17:39 UTC · Sep 17, 2020Vulnerability CVE-2020-13668 CVE-2020-13670 CVE-2020-13667+1 CVEs

60

CVE-2019-6342 flaw allows hackers to compromise Drupal 8.7.4 websites

Security AffairsJul 18, 09:34 UTC · Jul 18, 2019Vulnerability CVE-2019-6342 CVE-2019-6340

60

Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

The Hacker NewsAug 3, 11:13 UTC · Aug 3, 2018Vulnerability in the wildCVE-2018-14773

60

Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners

The Hacker NewsApr 18, 09:50 UTC · Apr 18, 2018Vulnerability in the wildCVE-2018-7600 CVE-2017-10271

60

Drupal developers fixed a code execution flaw in the popular CMS

Security AffairsJul 25, 06:21 UTC · Jul 25, 2022Vulnerability CVE-2022-25277

60

Drupal fixed a new flaw related PEAR Archive_Tar library

Security AffairsJan 22, 08:25 UTC · Jan 22, 2021Vulnerability CVE-2020-36193 CVE-2020-28948

35

Drupal addressed CVE-2020

Security AffairsNov 19, 17:37 UTC · Nov 19, 2020Vulnerability CVE-2020-13671 CVE-2020-13664

60