Most recent entries from all

bdu:2026-07114

2026-10-02T16:50:39.141004+00:00

bdu:2026-07114

BIT-drupal-2026-9082 — Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

2026-10-02T16:50:39.141040+00:00

Affected: Bitnami: drupal

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.

This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.

certfr-2026-avi-0629 — Une vulnérabilité a été découverte dans Drupal. Elle permet à un attaquant de provoquer une injection SQL (SQLi). L'éd…

2026-10-02T16:50:39.141075+00:00

certfr-2026-avi-0629

EUVD-2026-320180

2026-10-02T16:50:39.141093+00:00

EUVD-2026-320180

fkie_cve-2026-9082

2026-10-02T16:50:39.141105+00:00

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.

This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.

GHSA-ghwc-95x2-682j — Drupal Core has a SQL Injection issue

2026-10-02T16:50:39.141128+00:00

Affected: Packagist: drupal/core

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.

This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.

NCSC-2026-0166 — Kwetsbaarheid verholpen in Drupal core

2026-10-02T16:50:39.141152+00:00

NCSC-2026-0166

WID-SEC-W-2026-1620 — Drupal Core (PostgreSQL): Schwachstelle ermöglicht Manipulation von Dateien

2026-10-02T16:50:39.141168+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal Core ausnutzen, um eine SQL-Injection durchzuführen, die je nach Datenbankkonfiguration zur Offenlegung von Informationen, zur Erweiterung von Privilegien oder zur potenziellen Ausführung von Remote-Code führen kann.