Actively exploited vulnerabilities affecting Drupal products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-9082https://wildfortech.com/security#CVE-2026-9082Drupal's database abstraction API contains a SQL injection flaw that attackers can exploit by sending specially crafted requests. Successful exploitation can lead to privilege escalation — allowing an attacker to gain higher-level access than intended — and potentially remote code execution, meaning an attacker could run arbitrary code on the server. Any organization running Drupal Core is at risk, and compromise of the web server or underlying data could follow.Fri, 22 May 2026 00:00:00 GMTDrupalCore