CRITICALVulnerability
Global

Drupal critical update to fix bug with high exploitation risk

·Source: BleepingComputer

Updated:

Executive Summary

Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure. [...]

Analysis

Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure. [...]
Source Attribution

Originally published by BleepingComputer on May 20, 2026.

Related Threats

MEDIUMVulnerability

Mercury raises $200 million

Mercury, a provider of banking services for entrepreneurs and the tech industry, has raised $200 million in a Series D at a $5.2 billion valuation.

Finextra
MEDIUMVulnerability

FTC warns 12 major tech firms of violating Take It Down Act

The law mandates that platforms make it easy for people to ask that nonconsensual intimate images be removed and to delete them within 48 hours of a request.

The Record
CRITICALVulnerability

NVD CRITICAL: CVE-2026-20223 — A vulnerability in the access validation of internal REST APIs of Cisco Sec...

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a cra

CVE-2026-20223
NIST NVD