Drupal vulnerabilities
576 CVEs and advisories name Drupal as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
- CVE-2020-13671Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect exten
- CVE-2019-6340Drupal core - Highly critical - Remote Code Execution
- CVE-2018-7602Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004