AZ Central

Centauri Systems Brings Launchpad, the Fully Managed Developer Portal for Apigee, to Google Cloud Marketplace

Centauri Systems launches Launchpad, a fully managed developer portal for Apigee X, now available on Google Cloud Marketplace for enterprise API teams. Launchpad is the portal your Apigee platform ...
Bleeping Computer

CISA orders feds to patch actively exploited Drupal vulnerability

CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively ...
cyberinsider

Drupal warns of active exploitation attempts targeting critical SQL injection flaw

Drupal is warning administrators that attackers are already attempting to exploit a newly disclosed SQL injection vulnerability affecting the open-source content management system just days after ...
cyberpress

CISA Warns of Exploited Drupal SQL Injection Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-9082, a highly critical SQL injection vulnerability in Drupal Core, to its Known Exploited Vulnerabilities (KEV) ...
cybersecuritynews

CISA Warns of Drupal Core SQL Injection Vulnerability Exploited in Attacks

CISA has issued an urgent alert regarding a critical SQL injection vulnerability in Drupal Core, tracked as CVE-2026-9082, which is now being actively exploited in real-world attacks. The flaw, ...
securityaffairs

U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog. Drupal issued a highly critical security patch on May 20 for ...
securityaffairs

CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack

Attackers began exploiting Drupal SQL injection flaw CVE-2026-9082 within 48 hours of patch release. Drupal issued a highly critical security patch on May 20 for CVE-2026-9082, a SQL injection ...
The Hacker News

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based ...
Bleeping Computer

Drupal: Critical SQL injection flaw now targeted in attacks

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...
cyberpress

Critical Drupal Core Vulnerability Exposes Websites to Attacks

The Drupal Security Team has officially released SA-CORE-2026-004, patching a highly critical SQL injection vulnerability (CVE-2026-9082) that affects Drupal core’s database abstraction API across ...
SecurityWeek

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking

Drupal has patched a highly critical vulnerability that could allow threat actors to hack websites powered by the open source content management system (CMS). The developers of the CMS had alerted ...
Security Boulevard

Imperva Customers Protected Against CVE-2026-9082 in Drupal Core

On May 20, 2026, the Drupal Security Team disclosed SA-CORE-2026-004, tracked as CVE-2026-9082. The vulnerability affects Drupal core versions from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 ...