Summary
Drupal is urging immediate updates to patch CVE-2026-9082, an SQL injection vulnerability in the database abstraction API that is exploited in the wild. The flaw allows unauthenticated attackers to perform remote code execution and data theft on sites using PostgreSQL.
Take Action:
If you run Drupal, update to the latest version immediately because hackers are already using this flaw to take over websites. Even if you do not use PostgreSQL, the update fixes other hidden security holes in the software's building blocks like Symfony and Twig.
Read the full article on BeyondMachines
This article was originally published on BeyondMachines
