CYBERSECURITYTRACKER
Permanent story citation

Multiples vulnérabilités dans Drupal (17 septembre 2026)

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7665

As cited

Copy frozen at (site build).

vulnerabilities

Multiples vulnérabilités dans Drupal (17 septembre 2026)

Multiple vulnerabilities were discovered in Drupal that allow attackers to conduct cross-site scripting (XSS) attacks. These flaws enable indirect remote code injection through the application.

Why it matters: Drupal site administrators and developers must patch immediately to prevent attackers from injecting malicious code into their applications and compromising user sessions.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Multiple vulnerabilities in Drupal (September 17, 2026)

Multiple vulnerabilities were discovered in Drupal that allow attackers to conduct cross-site scripting (XSS) attacks. These flaws enable indirect remote code injection through the application.

Why it matters: Drupal site administrators and developers must patch immediately to prevent attackers from injecting malicious code into their applications and compromising user sessions.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary