Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
CVSS score
9.8
EPSS probability
%15.7
Risk score
3.1
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)
Mass Scanner For Drupal Exploit CVE-2026-9082
Drupal Core PostgreSQL SQLi to RCE via /user/login (CVE-2026-9082 / SA-CORE-2026-004)
ambionics/cve-2026-9082-drupal-postgresql-rce
Passive checker for CVE-2026-9082 / SA-CORE-2026-004 (Drupal core SQL injection, PostgreSQL)
Drupal CVE-2026-9082 Blind SQL Injection Checker
PoC for CVE-2026-9082 (Drupal SA-CORE-2026-004) Drupal Core SQLi
Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module on PostgreSQL-backed sites.
Drupal Core 10.5.5 - Error-Based SQL Injection
Nuclei: Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query
Similar Vulnerabilities
drupal: Unsanitized requests allow remote attackers to execute arbitrary code
drupal: does not sanitize data from non-form sources leads to arbitrary PHP code execution
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
Cross-site scripting in Jqueryui Jquery UI
Cross-site scripting in Jqueryui Jquery UI
Cross-site scripting in Jqueryui Jquery UI
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-9082"