Skip to content
THREATWIRE

CVE Tracker · Vendor

Drupal CVEs

5 CVEs in the tracker, 5 in the CISA KEV catalogue.

All vendors · RSS feed for Drupal · Tracker data last updated 18 Oct 2026.

Showing 5 of 5

  1. CVE-2018-7602CVSS 9.8 criticalEPSS 99.2%KEV2018-07-19

    Core. Drupal Core Remote Code Execution Vulnerability

  2. CVE-2018-7600CVSS 9.8 criticalEPSS 100%KEV2018-03-29

    Drupal Core. Drupal Core Remote Code Execution Vulnerability

  3. CVE-2026-9082No CVSSEPSS 15.7%KEV

    Core. Drupal Core SQL Injection Vulnerability

  4. CVE-2020-13671No CVSSEPSS 36.2%KEV

    Drupal core. Drupal core Un-restricted Upload of File

  5. CVE-2019-6340No CVSSEPSS 92.0%KEV

    Core. Drupal Core Remote Code Execution Vulnerability