Drupal clarified Wednesday afternoon that for the vulnerability in Coder, the module does not have to be enabled in order to be exploited. That fix addresses a problem in which the module doesn’t ...

Drupal has rolled out patches for five vulnerabilities, including two critical-severity bugs that could be exploited for remote code execution (RCE). The first resides in the Enti ...

Drupal says CVE-2026-118539 is being exploited against 42,000-plus sites, pushing Commerce Core users to patch and review ...

Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are ...

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen Best laptop cooling pads Best flip ...

Explore the latest news, real-world incidents, expert analysis, and trends in Drupal — only on The Hacker News, the leading ...

Drupal has patched CVE-2026-118539, an exploited Commerce Core access bypass that may financially impact online store owners.