CVE-2018-7600Used in ransomware
Drupal Drupal Core
Drupal Core Remote Code Execution Vulnerability
What it is
Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Drupal entries on the list
- Core Drupal Core SQL Injection Vulnerability CVE-2026-9082 · May 22, 2026
- Core Drupal Core Remote Code Execution Vulnerability CVE-2018-7602 · Apr 13, 2022
- Core Drupal Core Remote Code Execution Vulnerability CVE-2019-6340 · Mar 25, 2022
- Drupal core Drupal core Un-restricted Upload of File CVE-2020-13671 · Jan 18, 2022