netVigilance Vulnerability intelligence since 2004

Drupal

5 Drupal vulnerabilities with confirmed exploitation in the wild, as published by CISA; 5 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Drupal
Vulnerability Status
overdue 106d2026-05-27 CVE-2026-9082 Drupal / Core Drupal Core SQL Injection Vulnerability 2026-05-22 9.8 past due
overdue 1590d2022-05-04 CVE-2018-7602 Drupal / Core Drupal Core Remote Code Execution Vulnerability 2022-04-13 9.8 past dueransomware
overdue 1609d2022-04-15 CVE-2019-6340 Drupal / Core Drupal Core Remote Code Execution Vulnerability 2022-03-25 8.1 past due
overdue 1515d2022-07-18 CVE-2020-13671 Drupal / Drupal core Drupal core Un-restricted Upload of File 2022-01-18 8.8 past due
overdue 1591d2022-05-03 CVE-2018-7600 Drupal / Drupal Core Drupal Core Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware