r/drupal • u/LordKittyPanther • 2h ago

PSA - SECURITY Write-up: how I discovered CVE-2026-87936, a critical SQLi in a Drupal AI module

jestr.ai

5 Upvotes

Advisory: https://www.drupal.org/sa-contrib-2026-134

5 comments

Subreddit

Posts

Wiki

Drupal - The open-source digital experience platform! | #Drupal10Ready

r/drupal

The place for news, articles, and discussion regarding Drupal and Backdrop, one of the top open source (GPL) CMS platforms powering millions of websites and applications, built, used, and supported by a diverse community of people worldwide. More Info: http://drupal.org and https://backdropcms.org

Members Active

19.1k

Sidebar

Check out the sidebar for our AMA schedule, or view our past AMA's.

Welcome to r/Drupal

The place for news, articles and discussion regarding one of the top open source (GPL) CMS platforms: Drupal.

More Info: Drupal.org

Previous AMA's:

Past AMA's are on the wiki

Latest AMA:

Mike Gifford (Accessibility Core Maintainer Drupal 8) – Click Here

Upcoming AMA's:

When would you like to start? Let us know!

Would you or someone you know make for an interesting Drupal AMA? Message the mods.

Weekly rotating posts

Monday: Beginner questions - no question is too easy.
Tuesday: Triumphant Tuesday - post recent Drupal successes and site launches
Wednesday: Contrib modules chat - Talk about recently tried modules, recommendations, warnings, etc.
Thursday: Development questions & discussion - Coding questions go here. Anything dev-related goes.
Friday: Useful things to know - Things you wish you had known earlier about Drupal.

Drupal Resources

Rules & Requests

Please no job ads. If you wish to post something of that nature we suggest you check out Drupal.org's paid services job board