PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Keys to the Kingdom: Anonymous SQL Injection in Drupal Core (CVE-2026-9082)

slcyber.io | vulnerability | CVE-2026-9082 | #vulnerability-research | #sql-injection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Assetnote discovers an anonymous SQL injection vulnerability in Drupal Core exposing the full database without authentication — CVE-2026-9082.
CVE
CVE-2026-9082
Published
Collected

Related coverage

Critical · vulnerability · yeswehack.com
CVE-2026-9082: PostgreSQL SQL Injection in Drupal
A patch analysis of CVE-2026-9082 (SA-CORE-2026-004): a PostgreSQL-specific SQL injection in Drupal’s entity query subsystem where unsanitised array keys reach SQL, plus PoC paths and the fix.
vulnerability · netspi.com
CVE-2026-9082 Drupal Core PostgreSQL SQL Injection Overview and Takeaways
CVE-2026-9082 (CVSS 9.8) lets unauthenticated attackers run arbitrary SQL against Drupal Core on PostgreSQL via crafted JSON:API queries, risking database compromise or RCE; upgrade immediately.
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
CVE-2020-35700: Exploiting a Second-Order SQL Injection in LibreNMS < 21.1.0
# CVE-2020-35700: Exploiting a Second-Order SQL Injection in LibreNMS * * * ##### How can NodeZero help you? Let our experts walk you through a demonstration of NodeZero®, so you can see how to...
vulnerability · horizon3.ai
CVE-2020-29437: Authenticated SQL Injection in OrangeHRM < 4.6.0.1
OrangeHRM is software for Human Resource Management (HRM). In a routine audit of the open source version of OrangeHRM, we discovered a SQL injection…
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
Back