Drupal Commerce vulnerability CVE-2026-118539, a highly critical access bypass, is exploited in the wild. Upgrade to 3.3.13 or 8.x-2.41 now.
Drupal
Details and PoC code are public for the Drupal RCE vulnerability CVE-2026-108097 in Field UI. Update to 11.4.10, 11.3.19 or 10.6.19 now.
hackers exploit CVE-2022-39261 to read access to private files, contents of other files on the server, database credentials Drupal-powered websites
On April 18, 2018, Drupal has released security updates to address a Cross Site Scripting vulnerability affecting...