Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.

Drupal released security updates for a highly critical Drupal Core vulnerability affecting sites that use PostgreSQL.

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier ...

In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...