Critical 1 exploited CVE DSA-4156-1 1 CVE

drupal7 - security update

Published Mar 29, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 8	drupal7	7.32-1+deb8u11
Debian · 9	drupal7	7.52-2+deb9u3

Vulnerabilities 1

Critical 9.8

CVE-2018-7600 Exploited · Ransomware Public exploit Scanner template EPSS 100%

Drupal Core Remote Code Execution Vulnerability

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist

Mar 29, 2018
KEV Nov 3, 2021