Drupal vendor intelligence
Drupal Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Drupal products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 6
- Known exploited vulnerabilities affecting Drupal products
- In CISA KEV
- 5
- Records also listed in the official catalog
- Beyond CISA KEV
- 1
- Additional exploited vulnerability absent from CISA KEV
- Sensor Observed
- 3
- Drupal KEVs with sensor-observed exploitation activity
The catalog gap matters for Drupal exposure
One of the six exploited Drupal vulnerabilities tracked by Previdian is not in CISA KEV. Teams relying on the official catalog alone would miss 17% of this vendor portfolio.
- 83%
- Covered by CISA
- 17%
- Beyond CISA
- 5
- Product families
Attested Drupal vulnerabilities
6 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2014-3704
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which... |
Drupal | Confirmed | Beyond CISA | 03 Sep 2026 |
|
CVE-2026-9082
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 |
Drupal core | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2018-7600
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an... |
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-13671
Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension... |
Drupal Core | Confirmed | In CISA | 18 Jan 2022 |
|
CVE-2019-6340
Drupal core - Highly critical - Remote Code Execution |
Drupal Core | Confirmed | In CISA | 25 Mar 2022 |
|
CVE-2018-7602
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 |
core | Confirmed | In CISA | 13 Apr 2022 |
No Drupal vulnerabilities match this search or filter.
Showing 6 of 6 on this page (6 Drupal known exploited vulnerabilities).
Recurring weakness patterns
Neutralization, input validation, and unrestricted upload account for four mapped occurrences across this Drupal KEV portfolio.