{"uuid": "6062367f-4849-4a21-827b-7fb4dc309e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9082", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42635", "content": "Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\n\nThe vulnerability in question is CVE-2026-9082 (CVSS score: 6.5), an SQL injection vulnerability affecting all supported versions of Drupal Core.\n\n\"Drupal Core\nhttps://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.html", "creation_timestamp": "2026-09-19T00:00:45.049112Z"}