CERT24U.S. CISA Adds a Drupal Core Flaw to Its Known Exploited Vulnerabilities CatalogLoading data…
CERT24Threat Observatory
Period

U.S. CISA Adds a Drupal Core Flaw to Its Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9082 to its Known Exploited Vulnerabilities (KEV) catalog. The source describes it as a Drupal Core SQL injection vulnerability, but also refers to CVE-2026-9082 once as affecting Microsoft Exchange Server.

← Back to intelligence

U.S. CISA Adds a Drupal Core Flaw to Its Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9082 to its Known Exploited Vulnerabilities (KEV) catalog. The source describes it as a Drupal Core SQL injection vulnerability, but also refers to CVE-2026-9082 once as affecting Microsoft Exchange Server.