https://exploit-radar.com/en/flux/marques/drupal.xml Exploit Radar: exploited Drupal vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Drupal products. 2026-05-22T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-9082/ CVE-2026-9082 — Drupal Core 2026-05-22T00:00:00Z Apply the patches or mitigations from Drupal; if none are available, stop using the product. For cloud services, follow the guidance from Drupal. CISA deadline: 5 days. Added to CISA’s catalog of exploited vulnerabilities on May 22, 2026. https://exploit-radar.com/en/cve/CVE-2018-7602/ CVE-2018-7602 — Drupal Core 2022-04-13T00:00:00Z Apply the security update from Drupal. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2022. https://exploit-radar.com/en/cve/CVE-2019-6340/ CVE-2019-6340 — Drupal Core 2022-03-25T00:00:00Z Apply the security update from Drupal. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2020-13671/ CVE-2020-13671 — Drupal Core 2022-01-18T00:00:00Z Apply the security update from Drupal. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2022. https://exploit-radar.com/en/cve/CVE-2018-7600/ CVE-2018-7600 — Drupal Core 2021-11-03T00:00:00Z Apply the security update from Drupal. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.