netVigilance Vulnerability intelligence since 2004

Drupal

5 Drupal vulnerabilities with confirmed exploitation in the wild, as published by CISA; 5 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Drupal
Vulnerability Status
overdue 112d2026-05-27 CVE-2026-9082 Drupal / Core Drupal Core SQL Injection Vulnerability 2026-05-22 9.8 past due
overdue 1596d2022-05-04 CVE-2018-7602 Drupal / Core Drupal Core Remote Code Execution Vulnerability 2022-04-13 9.8 past dueransomware
overdue 1615d2022-04-15 CVE-2019-6340 Drupal / Core Drupal Core Remote Code Execution Vulnerability 2022-03-25 8.1 past due
overdue 1521d2022-07-18 CVE-2020-13671 Drupal / Drupal core Drupal core Un-restricted Upload of File 2022-01-18 8.8 past due
overdue 1597d2022-05-03 CVE-2018-7600 Drupal / Drupal Core Drupal Core Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware