The article describes a critical SQL injection vulnerability (CVE-2026-9082, CVSS 9.8) in Drupal. Affected versions include Drupal 8.9.0 through 10.4.9, 10.5.0 through 10.5.9, 10.6.0 through 10.6.8, 11.0.0 through 11.1.9, and 11.2.0 through 11.2.11. The fix requires upgrading to specific patched versions: 10.4.10, 10.5.10, 10.6.9, 11.1.10, 11.2.12, or 11.3.10.
Patch/Configuration Management Microsoft resolves Windows 11 update installation errors June 1, 2026 Share By SC Staff (Adobe Stock) As detailed in Bleeping Computer, Microsoft has addressed a persistent issue causing installation failures and specific error codes when deploying the May 2026 Windows 11 security update, KB5089549. The problem, which surfaced two weeks prior to its acknowledgment, was linked to insufficient free space on the EFI System Partition (ESP). The installation failures, often accompanied by messages like "Something didn't go as planned. Undoing changes," and log entries indicating "SpaceCheck" and "ServicingBootFiles failed," occurred when the ESP had 10 MB or less of available space. This led to the update automatically rolling back during the reboot phase. Microsoft has resolved this by releasing the KB5089573 preview cumulative update, with the fix slated for inclusion in the June Patch Tuesday updates. For those not yet updated, Microsoft's Known Issue Rollback feature or manual Group Policy configuration can be used as workarounds. Source: Bleeping Computer SC Staff Related Vulnerability Management PAN-OS authentication bypass bug added to list of exploited vulnerabilities Steve Zurier June 1, 2026 While NIST upgraded the bug to 9.1, experts say teams must focus more on how attackers can exploit this flaw to gain VPN access. Vulnerability Management CISA adds LiteSpeed cPanel plugin bug to exploited vulnerabilities list Steve Zurier May 27, 2026 CISA warns of exploited LiteSpeed flaw putting shared hosting at risk. Vulnerability Management Drupal bug added to CISA list of known exploited vulnerabilities Steve Zurier May 26, 2026 Drupal SQL injection flaw CVE-2026-9082 added to CISA KEV as active attacks target sites. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bug Buffer Overflow Disassembly You can skip this ad in 5 seconds