Drupal Core: known exploited vulnerabilities
Entries3
Ransomware-linked1
First added2022-03-25
Latest2026-05-22
EPSS compared
99.1%
92.0%
15.7%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-9082 | Drupal Core | 2026-05-22 | 15.7% | Unknown |
| CVE-2018-7602 | Drupal Core | 2022-04-13 | 99.1% | Known |
| CVE-2019-6340 | Drupal Core | 2022-03-25 | 92.0% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.