Drupal
Drupal known exploited vulnerabilities
Every Drupal vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 2 of them are known to be used by ransomware.
5 CVEs
- CVE-2026-9082Drupal Core SQL Injection Vulnerability · added May 22, 2026
- CVE-2018-7602 ransomwareDrupal Core Remote Code Execution Vulnerability · added April 13, 2022
- CVE-2019-6340Drupal Core Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2020-13671Drupal core Un-restricted Upload of File · added January 18, 2022
- CVE-2018-7600 ransomwareDrupal Core Remote Code Execution Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).