Drupal is warning users that it’s preparing a patch for a ‘highly critical’ vulnerability that may be exploited shortly after its disclosure.

CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection ...

A critical security update for Drupal Core will be released on the evening of Wednesday, May 20. Admins should install it quickly.

Drupal CVE-2026-9082 exploitation hit 15,000 attempts across 65 countries, forcing urgent patches by May 27, 2026.

Attackers are currently targeting websites created with the CMS Drupal. However, pages are only vulnerable if they use ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier ...

US cyber authorities have added a critical Drupal Core SQL injection flaw to their exploited-vulnerabilities list after attacks began targeting unpatched websites using PostgreSQL databases, ...