Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-9082 Drupal Core PostgreSQL SQL Injection Overview and Takeaways

netspi.com | vulnerability | CVE-2026-9082 | #rce | #postgresql | #sqli | #cms | #cve-2026-9082 | #drupal | #patch-now

Summary

CVE-2026-9082 (CVSS 9.8) lets unauthenticated attackers run arbitrary SQL against Drupal Core on PostgreSQL via crafted JSON:API queries, risking database compromise or RCE; upgrade immediately.
CVE
CVE-2026-9082
Published
Collected

original ↗

Related coverage

Critical · vulnerability · yeswehack.com
CVE-2026-9082: PostgreSQL SQL Injection in Drupal
A patch analysis of CVE-2026-9082 (SA-CORE-2026-004): a PostgreSQL-specific SQL injection in Drupal’s entity query subsystem where unsanitised array keys reach SQL, plus PoC paths and the fix.
vulnerability · netspi.com
CVE-2026-63030 & CVE-2026-60137: WordPress Core Pre-Authentication RCE Overview & Takeaways
The wp2shell chain pairs REST API route confusion (CVE-2026-63030) with WP_Query SQL injection (CVE-2026-60137) for unauthenticated full RCE on WordPress Core, now actively exploited in the wild.
vulnerability · netspi.com
Splunk Enterprise Unauthenticated Arbitrary File Operations/RCE (CVE-2026-20253): Overview and Takeaways
CVE-2026-20253 (CVSS 9.8) exposes an unauthenticated PostgreSQL sidecar endpoint in Splunk Enterprise 10.0.x/10.2.x, allowing file writes that chain to RCE via lo_export; a public PoC exists.
vulnerability · netspi.com
“StyleSmuggler” – Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways
CVE-2026-75650 (CVSS 10.0) lets unauthenticated attackers inject PHP through Magento's email template engine for RCE, with in-the-wild exploitation and Rust backdoors confirmed before the hotfix.
vulnerability · netspi.com
CVE-2026-41940 cPanel & WHM Authentication Bypass Overview and Takeaways
CVE-2026-41940 (CVSS 9.8) is an authentication bypass in cPanel & WHM and WP Squared that injects values into server-side session files for root-level access, and was exploited before the patch.
vulnerability · netspi.com
CVE-2026-35616 & CVE-2026-21643 – Fortinet FortiClientEMS: Overview & Takeaways
Two actively exploited FortiClientEMS flaws: CVE-2026-35616, an unauthenticated API auth bypass to RCE in 7.4.5/7.4.6, and CVE-2026-21643, SQLi limited to 7.4.4 multi-tenant deployments.
back