Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

A critical SQL injection vulnerability in Drupal Core, CVE-2026-9082, has been added to CISA's Known Exploited Vulnerabilities catalog following evidence of active exploitation. The addition of CVE-2026-9082 to CISA’s KEV catalog highlights a significant threat landscape shift that warrants immediate attention.

https://meta-news.info/ver/drupal-core-sql-injection-bug-actively-exploited-added-to-cisa-kev