Search: “Drupal core”

47 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 47 Exploit / PoC 18 Malware 5 Ransomware 3 Threat actor 3 Advisory 1

SeverityAll critical 68 high 3 medium 5 low 1 info 0

A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28th

Security AffairsMar 23, 07:52 UTC · Mar 23, 2018Vulnerability

55

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

The Hacker NewsMay 22, 05:30 UTC · May 22, 2026Vulnerability CVE-2026-9082

60

Drupal developers fixed a code execution flaw in the popular CMS

Security AffairsJul 25, 06:21 UTC · Jul 25, 2022Vulnerability CVE-2022-25277

60

Another Critical Flaw Found In Drupal Core—Patch Your Sites Immediately

The Hacker NewsApr 19, 07:24 UTC · Apr 19, 2018Vulnerability

55

Drupal Releases Core CMS Updates to Patch Several Vulnerabilities

The Hacker NewsApr 17, 21:51 UTC · Apr 17, 2019Vulnerability in the wildCVE-2019-10909 CVE-2019-10910 CVE-2019-1091

60

CVE-2018-14773 Symfony Flaw expose Drupal websites to hack

Security AffairsAug 3, 14:08 UTC · Aug 3, 2018Vulnerability CVE-2018-14773

35

Drupal addressed several issues, including a critical file processing bug

Security AffairsDec 19, 21:19 UTC · Dec 19, 2019Vulnerability

55

Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

The Hacker NewsAug 3, 11:13 UTC · Aug 3, 2018Vulnerability in the wildCVE-2018-14773

60

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

The Hacker NewsMay 20, 14:40 UTC · May 20, 2026Vulnerability

30

Drupal addressed XSS and information disclosure flaws

Security AffairsSep 17, 17:39 UTC · Sep 17, 2020Vulnerability CVE-2020-13668 CVE-2020-13670 CVE-2020-13667+1 CVEs

60

Drupal Warns Web Admins to Update CMS Sites to Patch a Critical Flaw

The Hacker NewsDec 19, 14:42 UTC · Dec 19, 2019Vulnerability

55

Drupal under attack due to a critical SQL injection flaw

Security AffairsMar 29, 12:08 UTC · Mar 29, 2018Vulnerability CVE-2014-3704

60

Drupal fixes three vulnerabilities, including one RCE

Help Net SecuritySep 18, 09:34 UTC · Sep 18, 2024Vulnerability CVE-2020-13663 CVE-2020-13664 CVE-2020-13665

60

Out-of-band Drupal security updates fix bugs with known exploits

Help Net SecurityNov 27, 00:00 UTC · Nov 27, 2020Vulnerability CVE-2020-28948 CVE-2020-28949 CVE-2020-13671

60

Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last Week

The Hacker NewsFeb 26, 13:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2019-6340

60

Drupal fixes 2 critical code execution issues flaws in Drupal 7, 8.5 and 8.6

Security AffairsJan 17, 12:39 UTC · Jan 17, 2019Vulnerability CVE-2018-10008881

60

Highly critical Drupal RCE flaw could lead to new Drupalgeddon, patch now!

Help Net SecurityFeb 21, 00:00 UTC · Feb 21, 2019Vulnerability in the wildCVE-2019-6340

60

Another Critical Flaw in Drupal Discovered — Update Your Site ASAP!

The Hacker NewsFeb 21, 10:18 UTC · Feb 21, 2019Vulnerability CVE-2019-6340

60

Drupal patched security vulnerabilities in Symfony, jQuery

Security AffairsApr 18, 14:01 UTC · Apr 18, 2019Vulnerability CVE-2019-10910 CVE-2019-10911 CVE-2019-10909

60

Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

The Hacker NewsApr 26, 11:04 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7600 CVE-2018-7602

60

Drupal-based sites open to attack via double extension files (CVE-2020-13671)

Help Net SecurityNov 25, 07:22 UTC · Nov 25, 2020Vulnerability in the wildCVE-2020-13671

60

Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerability

Help Net SecurityNov 29, 00:00 UTC · Nov 29, 2020Vulnerability CVE-2020-4006

60

CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flaw

Security AffairsApr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602 CVE-2018-7600 CVE-2017-10271

60

Drupal version 8.2.7 address multiple vulnerabilities in the current version of the popular CMS

Security AffairsMar 16, 15:01 UTC · Mar 16, 2017Vulnerability CVE-2017-6377 CVE-2017-6379 CVE-2017-6381

60

Old CVE-2014-3704 flaw in Drupal still exploited in attacks

Security AffairsMar 29, 12:07 UTC · Mar 29, 2018Vulnerability CVE-2014-3704

60

Drupal addressed CVE-2020

Security AffairsNov 19, 17:37 UTC · Nov 19, 2020Vulnerability CVE-2020-13671 CVE-2020-13664

60

US, UK, Australia issue joint advisory on today's top exploited vulnerabilities

The RecordDec 12, 00:00 UTC · Dec 12, 2022Vulnerability CVE-2019-19781 CVE-2019-11510 CVE-2018-13379+26 CVEs1

47

Critical vulnerability in Drupal References Module opens 120,000 Sites to hack

Security AffairsJun 22, 19:55 UTC · Jun 22, 2017Vulnerability CVE-2014-3704

60

Infection Monkey: Open source tool allows zero trust assessment of AWS environments

Help Net SecurityApr 20, 09:57 UTC · Apr 20, 2026Vulnerability CVE-2020-1472 CVE-2019-6340

60

Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

The Hacker NewsAug 23, 13:27 UTC · Aug 23, 2021Vulnerability in the wildCVE-2017-5638 CVE-2017-9805 CVE-2018-7600+12 CVEs

60

Drupal addresses critical code execution vulnerability

Security AffairsJun 18, 13:59 UTC · Jun 18, 2020Vulnerability CVE-2020-13664 CVE-2020-13663

60

Drupal fixes the CVE-2017

Security AffairsJun 22, 20:17 UTC · Jun 22, 2017Vulnerability CVE-2017-6922 CVE-2017-6920 CVE-2017-6921

60

Drupal emergency updates fix critical arbitrary PHP code execution

Security AffairsNov 27, 22:55 UTC · Nov 27, 2020Vulnerability CVE-2020-28948 CVE-2020-28949 CVE-2020-13671

60

Drupal is rolling out an emergency security update on May 20. You cannot miss it

Security AffairsMay 19, 19:30 UTC · May 19, 2026Vulnerability in the wild

60

Acquia renews Drupal Steward Program support to address always-evolving security risks

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2021Vulnerability

55

New Drupal RCE vulnerability under active exploitation, patch ASAP!

Help Net SecurityApr 26, 00:00 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602 CVE-2018-7600

60

EU launches bug bounties on free and open source software

Help Net SecurityJan 7, 00:00 UTC · Jan 7, 2019Vulnerability

55

CVE-2019-6340 Critical flaw in Drupal allows Remote Code Execution

Security AffairsFeb 21, 09:32 UTC · Feb 21, 2019Vulnerability CVE-2019-6340

60

Drupal fixed a new flaw related PEAR Archive_Tar library

Security AffairsJan 22, 08:25 UTC · Jan 22, 2021Vulnerability CVE-2020-36193 CVE-2020-28948

35

CMS-based sites under attack: The latest threats and trends

Help Net SecurityMay 3, 00:00 UTC · May 3, 2022Vulnerability

42