DR
CMS
Drupal
On CISA KEVExploited in the wildRansomware-linked
545
CVEs
8
On KEV
9.8
Max CVSS
72
New 30D
Severity mix
Critical 39High 72Medium 256Low 30
Watch
Add Drupal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9082 In wildKEV | 9.8 | May 20 | Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 Affected: 8.9.0 before 10.4.10; 10.5.0 before 10.5.10; 10.6.0 before 10.6.9; 11.0.0 before 11.1.10; 11.2.0 before 11.2.12; 11.3.0 before 11.3.10 |
| CVE-2018-7602 RansomwareIn wildKEV | 9.8 | Jul 19 | Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 Affected: before 7.59; before 8.5.3; before 8.4.8 |
| CVE-2018-7600 RansomwareIn wildKEV | 9.8 | Mar 29 | Drupal Core Remote Code Execution Vulnerability Affected: through 7.57; 8.0.0 before 8.3.9; 8.4.0 before 8.4.6; 8.5.0 before 8.5.1 |
Showing 3
The 500 most important CVEs for this product (exploited first, then by severity)