Information security
fromSecurityWeek
6 hours agoDrupal Patches Highly Critical Vulnerability Exposing Websites to Hacking
CVE-2026-9082 enables unauthenticated arbitrary SQL injection on Drupal sites using PostgreSQL, potentially leading to privilege escalation and remote code execution.