Security Risk Category

core Security Risks

Published vulnerability pages connected to core. One risk can appear in multiple categories while keeping one canonical page.

core risks

Showing 1 of 1 published risks.

criticalCISA KEVEPSS 0.846

Drupal Core SQL Injection Vulnerability

Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.

CVE-2026-9082drupalcore

Updated Jul 9, 2026