Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE AttacksThe Hacker News·May 22, 05:30 UTC · May 22, 2026VulnerabilityCVE-2026-908260
Drupal to Release Urgent Core Security Updates on May 20, Sites Told to PrepareThe Hacker News·May 20, 14:40 UTC · May 20, 2026Vulnerability30
Drupal emergency updates fix critical arbitrary PHP code executionSecurity Affairs·Nov 27, 22:55 UTC · Nov 27, 2020VulnerabilityCVE-2020-28948CVE-2020-28949CVE-2020-1367160
Drupal addressed the critical CVE-2018Security Affairs·Mar 29, 12:24 UTC · Mar 29, 2018Exploit / PoCCVE-2018-7600CVE-2014-370460
Drupal Releases Core CMS Updates to Patch Several VulnerabilitiesThe Hacker News·Apr 17, 21:51 UTC · Apr 17, 2019Vulnerability in the wildCVE-2019-10909CVE-2019-10910CVE-2019-109160
Drupal addressed several vulnerabilities in Drupal 8 and 7Security Affairs·Feb 23, 07:31 UTC · Feb 23, 2018Vulnerability55
Exploit in the Wild: #drupalgeddon2 - Analysis of CVE-2018Palo Alto Unit 42·Jan 28, 21:25 UTC · Jan 28, 2022Exploit / PoC in the wildCVE-2018-760060
Drupal Warns Web Admins to Update CMS Sites to Patch a Critical FlawThe Hacker News·Dec 19, 14:42 UTC · Dec 19, 2019Vulnerability55
A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28thSecurity Affairs·Mar 23, 07:52 UTC · Mar 23, 2018Vulnerability55
Drupal is rolling out an emergency security update on May 20. You cannot miss itSecurity Affairs·May 19, 19:30 UTC · May 19, 2026Vulnerability in the wild60
Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last WeekThe Hacker News·Feb 26, 13:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2019-634060
Another Critical Flaw in Drupal Discovered — Update Your Site ASAP!The Hacker News·Feb 21, 10:18 UTC · Feb 21, 2019VulnerabilityCVE-2019-634060
Acquia renews Drupal Steward Program support to address always-evolving security risksHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2021Vulnerability55
Drupal under attack due to a critical SQL injection flawSecurity Affairs·Mar 29, 12:08 UTC · Mar 29, 2018VulnerabilityCVE-2014-370460
Recently disclosed Drupal CVE-2019Security Affairs·Feb 26, 22:06 UTC · Feb 26, 2019Exploit / PoCCVE-2019-634060
Critical vulnerability in Drupal References Module opens 120,000 Sites to hackSecurity Affairs·Jun 22, 19:55 UTC · Jun 22, 2017VulnerabilityCVE-2014-370460
Drupal addressed several issues, including a critical file processing bugSecurity Affairs·Dec 19, 21:19 UTC · Dec 19, 2019Vulnerability55
CVE-2019-6340 Critical flaw in Drupal allows Remote Code ExecutionSecurity Affairs·Feb 21, 09:32 UTC · Feb 21, 2019VulnerabilityCVE-2019-634060
CVE-2018-14773 Symfony Flaw expose Drupal websites to hackSecurity Affairs·Aug 3, 14:08 UTC · Aug 3, 2018VulnerabilityCVE-2018-1477335
CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flawSecurity Affairs·Apr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-7600CVE-2017-1027160
Drupal maintainers fix several access bypass vulnerabilities in Drupal 8Security Affairs·Aug 17, 15:58 UTC · Aug 17, 2017VulnerabilityCVE-2017-6925CVE-2017-6924CVE-2017-692360
Drupal flaw allows reset password by crafting specific URLsSecurity Affairs·Mar 20, 07:26 UTC · Mar 20, 2015Vulnerability55
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEVThe Hacker News·May 23, 13:25 UTC · May 23, 2026Exploit / PoC in the wildCVE-2026-908260
Drupal fixes three vulnerabilities, including one RCEHelp Net Security·Sep 18, 09:34 UTC · Sep 18, 2024VulnerabilityCVE-2020-13663CVE-2020-13664CVE-2020-1366560
Drupal fixes 2 critical code execution issues flaws in Drupal 7, 8.5 and 8.6Security Affairs·Jan 17, 12:39 UTC · Jan 17, 2019VulnerabilityCVE-2018-1000888160
New Drupal RCE vulnerability under active exploitation, patch ASAP!Help Net Security·Apr 26, 00:00 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-760060
CVE-2026-9082: Drupal's Highly Critical SQL Injection Flaw Is Already Under Active AttackSecurity Affairs·May 23, 16:17 UTC · May 23, 2026Vulnerability in the wildCVE-2026-908260
Hacked Drupal sites involved in mining campaigns, RATs distributions, scamsSecurity Affairs·May 21, 12:00 UTC · May 21, 2018Threat actorCVE-2018-7600CVE-2018-760260
Another Critical Flaw Found In Drupal Core—Patch Your Sites ImmediatelyThe Hacker News·Apr 19, 07:24 UTC · Apr 19, 2018Vulnerability55
Experts warn threat actors are scanning the web for Drupal installs vulnerable to Drupalgeddon2Security Affairs·Apr 13, 18:59 UTC · Apr 13, 2018Threat actorCVE-2018-760060
Drupal fixes the CVE-2017Security Affairs·Jun 22, 20:17 UTC · Jun 22, 2017VulnerabilityCVE-2017-6922CVE-2017-6920CVE-2017-692160
Drupal-based sites open to attack via double extension files (CVE-2020-13671)Help Net Security·Nov 25, 07:22 UTC · Nov 25, 2020Vulnerability in the wildCVE-2020-1367160
Drupal patched security vulnerabilities in Symfony, jQuerySecurity Affairs·Apr 18, 14:01 UTC · Apr 18, 2019VulnerabilityCVE-2019-10910CVE-2019-10911CVE-2019-1090960
Drupal version 8.2.7 address multiple vulnerabilities in the current version of the popular CMSSecurity Affairs·Mar 16, 15:01 UTC · Mar 16, 2017VulnerabilityCVE-2017-6377CVE-2017-6379CVE-2017-638160
Third Critical Drupal Flaw Discovered—Patch Your Sites ImmediatelyThe Hacker News·Apr 26, 11:04 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7600CVE-2018-760260
Hackers Have Started Exploiting Drupal RCE Exploit Released YesterdayThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2018VulnerabilityCVE-2018-760060
Out-of-band Drupal security updates fix bugs with known exploitsHelp Net Security·Nov 27, 00:00 UTC · Nov 27, 2020VulnerabilityCVE-2020-28948CVE-2020-28949CVE-2020-1367160
Drupal addresses two XSS flaws by updating the CKEditorSecurity Affairs·Mar 20, 08:31 UTC · Mar 20, 2020Vulnerability55
Over 115,000 Drupal Sites still vulnerable to Drupalgeddon2, a gift to crooksSecurity Affairs·Jun 5, 06:56 UTC · Jun 5, 2018Exploit / PoCCVE-2018-760060
Drupal releases security updates to fix four vulnerabilities in versions 7, 8Security Affairs·Nov 18, 07:07 UTC · Nov 18, 2016VulnerabilityCVE-2014-370460