Skip to content

22 May 2026

1 new, 0 updated.

New that day

highpatchedexploited 22 May 2026 Drupal Core SQL Injection Vulnerability Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API. Added to CISA KEV on 2026-05-22 (federal deadline 2026-05-27). CVE-2026-90822 sources