Drupal Core
5 known vulnerabilities in Drupal Core, 2 critical, 4 actively exploited, with patch priority, exploit likelihood and the news covering them.
Recently exploited
- CVE-2026-9082 CVSS 9.8 critical · actively exploited Drupal Core SQL Injection Vulnerability
- CVE-2020-13671 CVSS 8.8 high · actively exploited Drupal core Un-restricted Upload of File
- CVE-2019-6340 CVSS 8.1 high · actively exploited Drupal Core Remote Code Execution Vulnerability
- CVE-2018-7602 CVSS 9.8 critical · actively exploited Drupal Core Remote Code Execution Vulnerability
Latest vulnerabilities
- CVE-2026-55803 CVSS 5.9 medium Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object…
- CVE-2026-9082 CVSS 9.8 critical · actively exploited Drupal Core SQL Injection Vulnerability
- CVE-2020-13671 CVSS 8.8 high · actively exploited Drupal core Un-restricted Upload of File
- CVE-2019-6340 CVSS 8.1 high · actively exploited Drupal Core Remote Code Execution Vulnerability
- CVE-2018-7602 CVSS 9.8 critical · actively exploited Drupal Core Remote Code Execution Vulnerability