Search: “Drupal core”

59 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 35 Exploit / PoC 18 Ransomware 3 Threat actor 2 Malware 1

SeverityAll critical 59 high 0 medium 0 low 0 info 0

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

The Hacker NewsMay 23, 13:25 UTC · May 23, 2026Exploit / PoC in the wildCVE-2026-9082

60

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

The Hacker NewsMay 22, 05:30 UTC · May 22, 2026Vulnerability CVE-2026-9082

60

Drupal developers fixed a code execution flaw in the popular CMS

Security AffairsJul 25, 06:21 UTC · Jul 25, 2022Vulnerability CVE-2022-25277

60

Drupal Releases Core CMS Updates to Patch Several Vulnerabilities

The Hacker NewsApr 17, 21:51 UTC · Apr 17, 2019Vulnerability in the wildCVE-2019-10909 CVE-2019-10910 CVE-2019-1091

60

U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog

Security AffairsMay 24, 07:54 UTC · May 24, 2026Exploit / PoC in the wildCVE-2026-9082

60

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+31 CVEs

60

Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

The Hacker NewsAug 3, 11:13 UTC · Aug 3, 2018Vulnerability in the wildCVE-2018-14773

60

Drupal addressed XSS and information disclosure flaws

Security AffairsSep 17, 17:39 UTC · Sep 17, 2020Vulnerability CVE-2020-13668 CVE-2020-13670 CVE-2020-13667+1 CVEs

60

Drupal under attack due to a critical SQL injection flaw

Security AffairsMar 29, 12:08 UTC · Mar 29, 2018Vulnerability CVE-2014-3704

60

Drupal fixes three vulnerabilities, including one RCE

Help Net SecuritySep 18, 09:34 UTC · Sep 18, 2024Vulnerability CVE-2020-13663 CVE-2020-13664 CVE-2020-13665

60

Out-of-band Drupal security updates fix bugs with known exploits

Help Net SecurityNov 27, 00:00 UTC · Nov 27, 2020Vulnerability CVE-2020-28948 CVE-2020-28949 CVE-2020-13671

60

Exploit in the Wild: #drupalgeddon2 - Analysis of CVE-2018

Palo Alto Unit 42Jan 28, 21:25 UTC · Jan 28, 2022Exploit / PoC in the wildCVE-2018-7600

60

Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last Week

The Hacker NewsFeb 26, 13:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2019-6340

60

Drupal fixes 2 critical code execution issues flaws in Drupal 7, 8.5 and 8.6

Security AffairsJan 17, 12:39 UTC · Jan 17, 2019Vulnerability CVE-2018-10008881

60

Highly critical Drupal RCE flaw could lead to new Drupalgeddon, patch now!

Help Net SecurityFeb 21, 00:00 UTC · Feb 21, 2019Vulnerability in the wildCVE-2019-6340

60

Another Critical Flaw in Drupal Discovered — Update Your Site ASAP!

The Hacker NewsFeb 21, 10:18 UTC · Feb 21, 2019Vulnerability CVE-2019-6340

60

Drupal patched security vulnerabilities in Symfony, jQuery

Security AffairsApr 18, 14:01 UTC · Apr 18, 2019Vulnerability CVE-2019-10910 CVE-2019-10911 CVE-2019-10909

60

Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

The Hacker NewsApr 26, 11:04 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7600 CVE-2018-7602

60

Drupal-based sites open to attack via double extension files (CVE-2020-13671)

Help Net SecurityNov 25, 07:22 UTC · Nov 25, 2020Vulnerability in the wildCVE-2020-13671

60

Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerability

Help Net SecurityNov 29, 00:00 UTC · Nov 29, 2020Vulnerability CVE-2020-4006

60

Recently disclosed Drupal CVE-2019

Security AffairsFeb 26, 22:06 UTC · Feb 26, 2019Exploit / PoC CVE-2019-6340

60

Network Attack Trends: Internet of Threats (November 2020

Palo Alto Unit 42Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2020-28188 CVE-2020-17519 CVE-2020-29227+62 CVEs

60

CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flaw

Security AffairsApr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602 CVE-2018-7600 CVE-2017-10271

60

Drupal version 8.2.7 address multiple vulnerabilities in the current version of the popular CMS

Security AffairsMar 16, 15:01 UTC · Mar 16, 2017Vulnerability CVE-2017-6377 CVE-2017-6379 CVE-2017-6381

60

Old CVE-2014-3704 flaw in Drupal still exploited in attacks

Security AffairsMar 29, 12:07 UTC · Mar 29, 2018Vulnerability CVE-2014-3704

60

Drupal addressed CVE-2020

Security AffairsNov 19, 17:37 UTC · Nov 19, 2020Vulnerability CVE-2020-13671 CVE-2020-13664

60

Critical vulnerability in Drupal References Module opens 120,000 Sites to hack

Security AffairsJun 22, 19:55 UTC · Jun 22, 2017Vulnerability CVE-2014-3704

60

May 2026 CVE Landscape

Recorded FutureJun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250 CVE-2009-1537 CVE-2009-3459+19 CVEs

60

Infection Monkey: Open source tool allows zero trust assessment of AWS environments

Help Net SecurityApr 20, 09:57 UTC · Apr 20, 2026Vulnerability CVE-2020-1472 CVE-2019-6340

60

US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog

Security AffairsJan 23, 18:13 UTC · Jan 23, 2022Exploit / PoC in the wildCVE-2021-32648 CVE-2021-21315 CVE-2021-21975+14 CVEs1

60

Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

The Hacker NewsAug 23, 13:27 UTC · Aug 23, 2021Vulnerability in the wildCVE-2017-5638 CVE-2017-9805 CVE-2018-7600+12 CVEs

60

Drupal addresses critical code execution vulnerability

Security AffairsJun 18, 13:59 UTC · Jun 18, 2020Vulnerability CVE-2020-13664 CVE-2020-13663

60

Drupal fixes the CVE-2017

Security AffairsJun 22, 20:17 UTC · Jun 22, 2017Vulnerability CVE-2017-6922 CVE-2017-6920 CVE-2017-6921

60

Drupal addressed the critical CVE-2018

Security AffairsMar 29, 12:24 UTC · Mar 29, 2018Exploit / PoC CVE-2018-7600 CVE-2014-3704

60

Drupal emergency updates fix critical arbitrary PHP code execution

Security AffairsNov 27, 22:55 UTC · Nov 27, 2020Vulnerability CVE-2020-28948 CVE-2020-28949 CVE-2020-13671

60

Crypto Me0wing attacks: Kitty cashes in on Monero

Help Net SecurityJun 26, 21:20 UTC · Jun 26, 2018Exploit / PoC CVE-2018-7600

60

Hackers continue to exploit the Drupalgeddon2 flaw in attacks in the wild

Security AffairsOct 8, 05:32 UTC · Oct 8, 2019Exploit / PoC CVE-2018-7600

60

Drupal is rolling out an emergency security update on May 20. You cannot miss it

Security AffairsMay 19, 19:30 UTC · May 19, 2026Vulnerability in the wild

60

Hacked Drupal sites involved in mining campaigns, RATs distributions, scams

Security AffairsMay 21, 12:00 UTC · May 21, 2018Threat actor CVE-2018-7600 CVE-2018-7602

60

Experts are observing Drupalgeddon2 (CVE-2018

Security AffairsApr 19, 04:02 UTC · Apr 19, 2018Exploit / PoC CVE-2018-7600 CVE-2017-10271

60