Drupal
Subprocessors
None extracted.
Security recordCSVof Drupal's security record · Atomfeed of Drupal's security record
What public security catalogs list for Drupal, in their words.
Known exploited vulnerabilities
5 vulnerabilities in Drupal's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-9082 | Core | Drupal Core SQL Injection Vulnerability | |
| CVE-2018-7602 | Core | Drupal Core Remote Code Execution Vulnerability used by ransomware | |
| CVE-2019-6340 | Core | Drupal Core Remote Code Execution Vulnerability | |
| CVE-2020-13671 | Drupal core | Drupal core Un-restricted Upload of File | |
| CVE-2018-7600 | Drupal Core | Drupal Core Remote Code Execution Vulnerability used by ransomware |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
ChangesCSVof Drupal's changes · Atomfeed of Drupal's changes
None since tracking began.
Rating badge for Drupal's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/drupal"><img src="https://thirdpartyindex.com/badge/drupal.svg" alt="Drupal transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/drupal)