May 25, 2026 May 25, 2026Drupal Core SQL Injection Vulnerability Exploited in Active AttacksThe Drupal core SQL injection vulnerability CVE 2026 9082 is being actively exploited against PostgreSQL backed Drupal sites, exposing organizations to remote code execution and database compromise risks.