CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack
Attackers began exploiting Drupal SQL injection flaw CVE-2026-9082 within 48 hours of patch release. Drupal issued a highly critical security patch on May 20 for CVE-2026-9082, a SQL injection vulnerability that allows unauthenticated attackers to compromise …
CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack Drupal issued a highly critical security patch on May 20 for CVE-2026-9082, a SQL injection vulnerability th… [+4853 chars]