Drupal Critical SQL Injection Vulnerability Exploited

Drupal warns of active exploitation attempts targeting a critical SQL injection vulnerability (CVE-2026-9082) in its PostgreSQL database abstraction API, affecting multiple versions and urging immediate updates. Drupal's PostgreSQL database abstraction API flaw poses significant risks due to its potential for remote code execution, privilege escalation, and data disclosure.

https://meta-news.info/ver/drupal-critical-sql-injection-vulnerabi…