Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Back to intelligence
internet-facing-service-vulnerabilitywidely-deployed-product-advisory

Drupal and TYPO3 Core Flaws Prompt CMS Security Advisories

Updated 2mo agoFirst seen Apr 16, 20262 sources

Security advisories were issued for multiple vulnerabilities in Drupal Core and for a TYPO3 Core information disclosure flaw, highlighting fresh risk in widely deployed content management systems. The Drupal notice identifies several unresolved security issues in the core platform, while the TYPO3 advisory warns that a vulnerability could expose sensitive information to unauthorized parties.

Organizations running either CMS are likely to review affected versions, assess exposure of internet-facing instances, and prioritize vendor guidance for patching or mitigation. The disclosures underscore the operational risk of unremediated core-platform weaknesses in web publishing environments, where vulnerabilities can affect confidentiality and potentially broaden the attack surface for follow-on compromise.

Share:
Drupal and TYPO3 Core Flaws Prompt CMS Security Advisories
Stay ahead

Get ahead of threats like this

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.

Start free trial
EVENT TIMELINE

How this story unfolded

2 events from the most recent confirmed update back to the earliest known activity.

2 EVENTS
Apr 21, 20262mo ago

dCERT publishes TYPO3 Core information disclosure advisory

dCERT issued Advisory 2026-1169 for a TYPO3 Core vulnerability that allows information disclosure. The reference indicates the advisory was published on April 21, 2026.

Apr 16, 20262mo ago

dCERT publishes Drupal Core multiple vulnerabilities advisory

dCERT issued Advisory 2026-1132 for multiple vulnerabilities affecting Drupal Core. The reference indicates the advisory was published on April 16, 2026.

LINKED ENTITIES

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

2 LINKEDOpen in app
Affected products
1 linked
Drupal Core
Organizations
1 linked
Deutsche Telekom Security GmbH
SOURCE COVERAGE

Sources

2 references tracked. Mallory keeps watching after this page renders.

2 SOURCESView all
The operational view lives in Mallory

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t — which of your assets are affected, which threat actors are using it right now, which detections to deploy, and what to do next.
Start free trial
Exposure mapping

Map indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidence

Every observed campaign, victim, and pivot linked to actors named in this story.

Associated malware

Malware, exploits, and IOCs connected to the activity described here.

Detection signatures

YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alerts

Get matching new stories delivered to your team as they break — not the next morning.

AI threads

Ask questions about this story and take action on the answers.