Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
6 / 14 results
criticalbug_reportVulnerabilityDrupal patches two critical RCE flaws in all supported versions
All supported versions of Drupal CMS. Specific version numbers and CVE identifiers not provided in available data. Both vulnerabilities enable remote code execution.
criticalbug_reportVulnerabilityDrupal Field UI RCE flaw patched; unauthenticated exploit path exists
Drupal core versions 10.6.x, 11.3.x, and 11.4.x with Field UI module enabled. Fixed in 10.6.19, 11.3.19, and 11.4.10. Drupal 8, 9, and older 10.x/11.x branches are end-of-life and unpatched.
criticalbug_reportVulnerabilityCISA orders emergency patching of exploited Drupal SQL injection flaw
Drupal CMS (specific versions not provided in alert). Affects U.S. government agencies and all organizations running vulnerable Drupal instances.
criticalbug_reportVulnerabilityDrupal SQL injection under active exploitation, patch immediately
Drupal CMS installations. Specific affected versions not provided in available data. Critical SQL injection vulnerability announced this week, now actively exploited.
criticalbug_reportVulnerabilityCritical SQL injection in Drupal Core requires immediate patching
Drupal Core, all versions (specific affected versions not disclosed in alert). Impacts all Drupal installations until patched.
criticalbug_reportVulnerabilityDrupal critical core vulnerability with imminent exploit risk
Drupal core (specific versions not disclosed). All Drupal installations should be considered at risk until patched.