The Drupal Security Team’s Monday PSA announcing the imminent patch for Drupal core doesn’t include any specifics, with the ...

Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.

In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...

Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop exploits ...