Vulnerabilities CVE-2026-9082

CVE-2026-9082

None

Open

KEV

TLP:CLEAR

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.

Details

EPSS Score ⓘ: 88.32%

99.8th percentile
Confidence: 100%
Published: May 20, 2026
Last Modified: May 22, 2026
CISA KEV
Date Added: May 22, 2026
Patch Due: May 27, 2026
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.