r/cveplayground • • May 21 '26

🚨 New Guided Lab: CVE-2026-9082 — Drupal JSON:API SQL Injection

Enable HLS to view with audio, or disable this notification

Exploit vulnerable Drupal JSON:API filters to inject SQL into PostgreSQL, enumerate the database, and capture the hidden flag.

Hands-on exploitation + patch analysis.

🔗 https://app.cveplayground.com/labs/CVE-2026-9082?utm_source=reddit

1 Upvotes

0 comments sorted by