Vendor
Drupal vulnerabilities under active attack
5 Drupal vulnerabilities have confirmed evidence of exploitation in the wild, and 2 are used in ransomware campaigns.
5
confirmed exploited
2
used in ransomware
5
past fix deadline
- CVE-2026-9082 Drupal Core SQL Injection Vulnerability Drupal · Core
- CVE-2018-7602 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2019-6340 Drupal Core Remote Code Execution Vulnerability Drupal · Core
- CVE-2020-13671 Drupal core Un-restricted Upload of File Drupal · Drupal core
- CVE-2018-7600 Drupal Core Remote Code Execution Vulnerability Drupal · Drupal Core