Drupal core – Highly critical – SQL injection – SA-CORE-2026-004
Project: Drupal core Date: 2026-May-20 Security risk: Highly critical 20 ∕ 25 AC:None/A:None/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: SQL injection Affected versions: >= 8.9.0