Drupal SQL Injection RCE Active Exploitation | MSSP Advisory

Drupal released emergency patches for a highly critical SQL injection vulnerability in Drupal core that allows unauthenticated attackers to execute arbitrary SQL queries and potentially gain full site control. The flaw affects Drupal 10.2 and 10.3 installations and is now being actively exploited in the wild. Attackers can bypass authentication, access sensitive data, and execute commands without any user interaction.

Your clients running Drupal websites face immediate compromise risk from unauthenticated attacks that can dump databases and plant backdoors. Any MSSP managing web hosting, monitoring client websites, or providing security services must act within hours to prevent client breaches that will reflect directly on your advisory capability.

📬