🔴 Critical: Drupal patches critical RCE flaws, warns exploits may emerge soon
-
Drupal has released patches for two critical vulnerabilities that could let attackers execute code remotely on sites running any supported version of the CMS. The project is warning that exploits may surface soon, so treating the update as urgent is advised.
The flaws affect supported Drupal releases, meaning site owners on current branches are in scope — not just those running outdated installs. Because the issue enables remote code execution, a successful attack could give an adversary direct control over the affected site.
Recommended actions:
- Update Drupal core to the latest patched release for your version branch as soon as possible.
- Review your site logs for unusual activity if you cannot patch immediately.
- Apply the update during a maintenance window if change control requires it, but do not delay beyond your normal emergency patching threshold.
No specific CVE identifiers were included in the source report, so none are listed here.
Source: BleepingComputer
Has your organization already applied the Drupal core update, or are you waiting on a maintenance window?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login