Cybersecurity Alerts

Actively Exploited Vulnerabilities

← Back to Cybersecurity Alerts

CVE-2018-7602

Drupal | CoreAdded 2022-04-13Remediation Deadline 2022-05-04Active Ransomware Campaign

Drupal Core Remote Code Execution Vulnerability

A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.

Required Action

Apply updates per vendor instructions.

References