LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Drupal CVEs

Every Drupal vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

4Tracked CVEs 1Known exploited 1Critical 9.0+ 0Covered this week

All Known exploited Critical High This week

4 CVEs EPSSCoverage

9.8CVSS 3.1 CVE-2026-9082 Exploited Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 Drupal · Core EPSS 89% 1 story 2 weeks ago 8.1CVSS 3.1 CVE-2026-108097 Drupal core - Critical - Remote code execution - SA-CORE-2026-014 Drupal · core EPSS 0.57% 2 stories 2 weeks ago 8.1CVSS 3.1 CVE-2026-108099 Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218 Drupal · Entity List EPSS 0.41% 2 stories 2 weeks ago 6.5CVSS 3.1 CVE-2026-118539 Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 Drupal · Commerce Core EPSS 0.67% 1 story 2 weeks ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.