Drupal Patches Unauthenticated SQL Injection Flaw Rated Highly Critical โ Government and University Sites at Immediate Risk
Drupal released an emergency core security patch on May 20, 2026, fixing CVE-2026-9082, an unauthenticated SQL injection vulnerability in its database abstraction layer affecting a