Drupal Faces Exploitation Attempts Following Critical Vulnerability Disclosure
Drupal has issued a warning regarding a critical vulnerability, CVE-2026-9082, which has already seen exploitation attempts shortly after its disclosure. This vulnerability affects an API responsible for sanitizing database queries to prevent SQL injection. The flaw allows attackers to send specially crafted requests, leading to arbitrary SQL injection on sites using PostgreSQL databases. This can result in unauthorized information access, privilege escalation, and remote code execution. Although Drupal powers numerous websites, the vulnerability impacts less than 5% of sites, specifically those using PostgreSQL. The risk score for this vulnerability was recently updated from 20 to 23, indicating active exploitation attempts. Security firm Imperva has reported over 15,000 exploitation attempts targeting nearly 6,000 sites across 65 countries, with a significant focus on gaming and financial services websites. 
