Drupal
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
SA-CORE-2026-004 May 20, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-004. 1 reporter(s), 7 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2026-004
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
8 lines
Showing 1–8 of 8
CVE-2026-9082
BR2026-0000-008551
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Michael Maturi (michaelmaturi)
CVE-2026-9082
BR2026-0000-008552
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Björn Brala (bbrala)
CVE-2026-9082
BR2026-0000-008553
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Benji Fisher (benjifisher) of the Drupal Security Team
CVE-2026-9082
BR2026-0000-008554
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as catch (catch) of the Drupal Security Team
CVE-2026-9082
BR2026-0000-008555
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2026-9082
BR2026-0000-008556
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Dave Long (longwave) of the Drupal Security Team
CVE-2026-9082
BR2026-0000-008557
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2026-9082
BR2026-0000-008558
unclaimed
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Credited as Jess (xjm) of the Drupal Security Team