Description
A vulnerability in multiple subsystems of Drupal allows remote attackers to execute arbitrary operating system commands on the server, leading to potential compromise of the affected system.
Recommendation
Mitigate the risk by upgrading Drupal to the latest stable version that includes patches for the vulnerability.
References
Could your website be exposed too?
SmartScanner can check your website for Drupal 'Drupalgeddon2' Remote Code Execution and gives you actionable findings to investigate.
Start a free scanRelated Issues
- DbGate: Remote Code Execution via functionName injection in loadReader endpoint - CVE-2026-48017
- Authenticated Remote Code Execution via loadReader functionName code injection in DbGate - CVE-2026-47670
- Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified - CVE-2026-69255
- Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability - flowise-components - CVE-2026-70477
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024