PT-2018-18169 · Drupal+1 · Drupal+1

Blaklis + 1 · Published 2018-04-25 · Updated 2025-08-27 · CVE-2018-7602

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Drupal versions 7.x through 8.x

Description A remote code execution issue exists within multiple subsystems of Drupal. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. The issue is related to Drupal core and is being exploited in the wild.

Recommendations For versions 7.x and 8.x, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-04575

CVE-2018-7602

DLA-1365-1

DRUPAL-CORE-2018-004

DSA-4180-1

GHSA-297X-J9PM-XJGG

USN-4773-1

Affected Products

Drupal

Ubuntu

References · 32

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-7602.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-7602.yaml · Exploit
• 🔥 https://github.com/1337g/Drupalgedon3 · Exploit
• 🔥 https://exploit-db.com/exploits/44542 · Exploit
• 🔥 https://exploit-db.com/exploits/44557 · Exploit
• https://drupal.org/sa-core-2018-004 · Vendor Advisory
• https://debian.org/security/2018/dsa-4180 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-7602 · Security Note
• https://osv.dev/vulnerability/DSA-4180-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7602 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04575 · Security Note
• https://ubuntu.com/security/notices/USN-4773-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7602 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7602 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4773-1 · Vendor Advisory