Drupal has released security updates for a "highly critical" security vulnerability in Drupal Core that could be exploited by attackers to achieve remote code execution, privilege escalation, or information disclosure. The vulnerability, now tracked as CVE-2026-9082, carries a CVSS score of 6.5 out of 10.0, per CVE.org. Drupal said the vulnerability resides in a database abstraction API that is
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-05-21 03:44 UTC
- Importiert: 2026-05-29 18:00 UTC
- CVSS: 6.5
- Quelle-ID:
thn_global - uid_hash:
46105e57f78d899d00c57335c71822e1518fabead0a53b4a06bf2d9a47f18fcc
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
MEDIUM |
6.5 |
MEDIUM |
6.5 |
2026-05-20 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| The Hacker News | security_news | - | de | https://feeds.feedburner.com/TheHackersNews |