Drupal warns of active exploitation attempts targeting critical SQL injection flaw

Drupal is warning administrators that attackers are already attempting to exploit a newly disclosed SQL injection vulnerability affecting the open-source content management system just days after security patches were released. The flaw, tracked as CVE-2026-9082, impacts Drupal’s database abstraction API, which is designed to sanitize database queries and prevent SQL injection attacks. According to Drupal, … The post Drupal warns of active exploitation attempts targeting critical SQL injection flaw appeared first on CyberInsider.