Dashboard / CVE-2018-7602

CVE-2018-7602

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.

CISA Known Exploited Vulnerability

Vendor / Product Drupal — Core
Date Added 2022-04-13
Remediation Due 2022-05-04
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2018-7602

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
debian debian_linux 7.0
debian debian_linux 8.0
debian debian_linux 9.0
drupal drupal 7.0 – 7.59
drupal drupal 8.4.0 – 8.4.8
drupal drupal 8.5.0 – 8.5.3

References & Advisories (8)

https://www.exploit-db.com/exploits/44542/
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/44557/
Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/103985
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040754
Broken Link Third Party Advisory VDB Entry

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links