CISA orders feds to patch actively exploited Drupal vulnerability
Tue May 26 2026
Government
Patch Management
Vulnerability
www.bleepingcomputer.com
CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively exploited. [...]