{
  "ticket_id": "CVE-2026-9082",
  "source": "cve",
  "cve_id": "CVE-2026-9082",
  "advisory_id": "SA-CORE-2026-004",
  "html_url": "https://www.drupal.org/sa-core-2026-004",
  "references": [
    "https://www.drupal.org/sa-core-2026-004",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-9082",
    "https://www.cve.org/CVERecord?id=CVE-2026-9082"
  ],
  "published_at": "2026-05-20",
  "severity": "critical",
  "cwe": ["CWE-89"],
  "cvss": {
    "nvd_v3_1_base_score": 6.5,
    "nvd_v3_1_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
    "drupal_risk_score": "20/25 (Highly critical)"
  },
  "labels": ["security", "sql-injection", "drupal-core", "postgresql"],
  "state": "published"
}