#Drupal Core

CVE-2026-9082: Drupal Core RCE via Database API (PostgreSQL)

A highly critical flaw, CVE-2026-9082, in Drupal Core's database abstraction API allows RCE, privilege escalation, and info disclosure on PostgreSQL sites. Patch