Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure
2026-05-22T19:24:09Z•0998645f20e0e5ae8838d7dcec86e138671b7ffa6143244d6d60cf7ae20091d5
CVE-2026-34926CVE-2026-9082botnetciscodirectory-traversaldrupalexploitationfirst-vpngrafanakimwolflaw-enforcementpatchingremote-code-executionsecure-workloadsupply-chaintanstacktrendaizero-day
What happened
SecurityWeek reports a critical, unauthenticated Drupal vulnerability (CVE-2026-9082) disclosed and quickly targeted by attackers — observed exploitation attempts against thousands of sites and capable of information disclosure, privilege escalation and remote code execution; Drupal has released patches and users are urged to apply them immediately. The feed also highlights TrendAI patching a directory traversal zero-day in Apex One (CVE-2026-34926) that was exploited in the wild, a Grafana codebase/data theft tied to the TanStack supply-chain incident, Cisco fixing a critical Secure Workload/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 0998645f20e0e5ae8838d7dcec86e138671b7ffa6143244d6d60cf7ae20091d5
- Enrichment time
- 2026-05-22T19:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.