cybercrime.clubhttps://cybercrime.club/tags/drupal/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 20 May 2026 23:09:01 -0400Drupal SA-CORE-2026-004: Highly Critical Unauthenticated SQL Injection Hits PostgreSQL Siteshttps://cybercrime.club/posts/drupal-cve-2026-9082-sa-core-2026-004-postgresql-sql-injection/Wed, 20 May 2026 23:09:01 -0400https://cybercrime.club/posts/drupal-cve-2026-9082-sa-core-2026-004-postgresql-sql-injection/CVE-2026-9082 is a highly critical SQL injection in Drupal core's database abstraction API. Anonymous attackers can run arbitrary SQL against PostgreSQL-backed sites. Patches dropped May 20; exploitation is expected within days.vulnerabilities