Vulnerabilities CISA Adds Drupal Core SQL Injection Flaw to KEV May 23, 2026 Critical vulnerability CVE-2026-9082 affecting all supported Drupal versions is being actively exploited in the wild. Read More