Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
CVSS Skor
9.8
EPSS İhtimal
%15.7
Risk Skoru
3.1
Yayın
4 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)
Mass Scanner For Drupal Exploit CVE-2026-9082
Drupal Core PostgreSQL SQLi to RCE via /user/login (CVE-2026-9082 / SA-CORE-2026-004)
ambionics/cve-2026-9082-drupal-postgresql-rce
Passive checker for CVE-2026-9082 / SA-CORE-2026-004 (Drupal core SQL injection, PostgreSQL)
Drupal CVE-2026-9082 Blind SQL Injection Checker
PoC for CVE-2026-9082 (Drupal SA-CORE-2026-004) Drupal Core SQLi
Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module on PostgreSQL-backed sites.
Drupal Core 10.5.5 - Error-Based SQL Injection
Nuclei: Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query
İlgili Benzer Açıklar
drupal: Unsanitized requests allow remote attackers to execute arbitrary code
drupal: does not sanitize data from non-form sources leads to arbitrary PHP code execution
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
Cross-site scripting in Jqueryui Jquery UI
Cross-site scripting in Jqueryui Jquery UI
Cross-site scripting in Jqueryui Jquery UI
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-9082"