The Drupal CMS team has fixed a highly critical security flaw that allows hackers to take over a site just by accessing an URL. Drupal site owners should immediately —and we mean right now— update ...

Drupal has released a security update to address a critical vulnerability in a third-party library with documented or deployed exploits available in the wild. "The Drupal project uses the pear Archive ...

Drupal announced two vulnerabilities affecting versions 9.2 and 9.3 that could allow an attacker to upload malicious files and take control of a site. The threat levels of the two vulnerabilities are ...

If you’re responsible for one of the 700,000 websites running Drupal 7 right now, you’ll have heard about the big change coming to Drupal. The release of Drupal 9 and the subsequent withdrawal of ...

Drupal has issued a security update which resolves three security flaws, two of which are deemed critical. Earlier this week, the open-source website content management system (CMS) released a ...

Drupal has released its February patch update with fixes for 10 vulnerabilities, including several which allow attackers to execute code remotely and access website elements which should be blocked.

Poor input validation makes previous versions of Drupal vulnerable. If the conditions are right, attackers can execute malicious code in the victim's web browser via compromised websites created with ...

Content management system (CMS) platform Drupal is urging its users to install a patch for a “highly critical” vulnerability that can be readily exploited by attackers to wrest control of any website ...

The Drupal project, which manages development of the content management system of the same name, reset passwords for nearly 1 million users on May 29 after its security team discovered that the site ...

Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. Drupal.org is the official website for the popular ...