Product

Core

Made by Drupal. 3 of its vulnerabilities are known to have been exploited.

Coverage

No recent stories mention this product.

Actively exploited

Drupal Core

Drupal Core SQL Injection Vulnerability

Added May 22, 2026Fed. due May 27, 2026
CVE-2018-7602RansomwareCVSS 9.8

Drupal Core

Drupal Core Remote Code Execution Vulnerability

Added Apr 13, 2022Fed. due May 4, 2022

Drupal Core

Drupal Core Remote Code Execution Vulnerability

Added Mar 25, 2022Fed. due Apr 15, 2022