critical CISA KEV Ransomware

CVE-2018-7600

Drupal Core Remote Code Execution Vulnerability

// Description

Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.

// Required action

Apply updates per vendor instructions.

Federal remediation due May 3, 2022 — past due

// Coverage

Drupal Core Security Release: Preparing for High-Risk Exploitation
May 20, 2026