Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEVThe Hacker News·May 23, 13:25 UTC · May 23, 2026Exploit / PoC in the wildCVE-2026-908260
Drupal Releases Core CMS Updates to Patch Several VulnerabilitiesThe Hacker News·Apr 17, 21:51 UTC · Apr 17, 2019Vulnerability in the wildCVE-2019-10909CVE-2019-10910CVE-2019-109160
U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 24, 07:54 UTC · May 24, 2026Exploit / PoC in the wildCVE-2026-908260
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch NowThe Hacker News·Aug 3, 11:13 UTC · Aug 3, 2018Vulnerability in the wildCVE-2018-1477360
Exploit in the Wild: #drupalgeddon2 - Analysis of CVE-2018Palo Alto Unit 42·Jan 28, 21:25 UTC · Jan 28, 2022Exploit / PoC in the wildCVE-2018-760060
Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last WeekThe Hacker News·Feb 26, 13:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2019-634060
Highly critical Drupal RCE flaw could lead to new Drupalgeddon, patch now!Help Net Security·Feb 21, 00:00 UTC · Feb 21, 2019Vulnerability in the wildCVE-2019-634060
Third Critical Drupal Flaw Discovered—Patch Your Sites ImmediatelyThe Hacker News·Apr 26, 11:04 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7600CVE-2018-760260
Drupal-based sites open to attack via double extension files (CVE-2020-13671)Help Net Security·Nov 25, 07:22 UTC · Nov 25, 2020Vulnerability in the wildCVE-2020-1367160
Network Attack Trends: Internet of Threats (November 2020Palo Alto Unit 42·Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2020-28188CVE-2020-17519CVE-2020-29227+62 CVEs60
CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flawSecurity Affairs·Apr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-7600CVE-2017-1027160
May 2026 CVE LandscapeRecorded Future·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+19 CVEs60
US CISA added 17 flaws to its Known Exploited Vulnerabilities CatalogSecurity Affairs·Jan 23, 18:13 UTC · Jan 23, 2022Exploit / PoC in the wildCVE-2021-32648CVE-2021-21315CVE-2021-21975+14 CVEs160
Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux SystemsThe Hacker News·Aug 23, 13:27 UTC · Aug 23, 2021Vulnerability in the wildCVE-2017-5638CVE-2017-9805CVE-2018-7600+12 CVEs60
Drupal is rolling out an emergency security update on May 20. You cannot miss itSecurity Affairs·May 19, 19:30 UTC · May 19, 2026Vulnerability in the wild60
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under AttackThe Hacker News·Apr 26, 12:32 UTC · Apr 26, 2018Exploit / PoC in the wildCVE-2018-7602CVE-2018-760060
New Drupal RCE vulnerability under active exploitation, patch ASAP!Help Net Security·Apr 26, 00:00 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-760060
Top 30 Critical Security Vulnerabilities Most Exploited by HackersThe Hacker News·Aug 4, 09:03 UTC · Aug 4, 2021Vulnerability in the wildCVE-2019-19781CVE-2019-11510CVE-2018-13379+26 CVEs60
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever ShippedThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-24990CVE-2025-59230CVE-2025-47827+5 CVEs160
Multiple Code Execution Flaws Found In PHP Programming LanguageThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2019Exploit / PoC in the wildCVE-2019-1322460
Alert: Microsoft Releases Patch Updates for 5 New ZeroThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025CVE-2023-36033CVE-2023-36036+9 CVEs60
Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware ExploitThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252CVE-2022-24521CVE-2022-37969+6 CVEs60
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited ZeroThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Vulnerability in the wildCVE-2025-26643CVE-2025-24983CVE-2025-24984+5 CVEs160
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security UpdateThe Hacker News·Jan 21, 15:30 UTC · Jan 21, 2025Exploit / PoC in the wildCVE-2024-7344CVE-2025-21333CVE-2025-21334+13 CVEs60
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps ServerThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+10 CVEs160
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Microsoft Patches 61 Flaws, Including Two Actively Exploited ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2024Vulnerability in the wildCVE-2024-4671CVE-2024-4761CVE-2024-30040+9 CVEs60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two ZeroThe Hacker News·Dec 10, 15:09 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62223CVE-2025-62221CVE-2025-54100+6 CVEs160