The Drupal development team has patched several vulnerabilities in version 7 and 8 of the popular CMS. The development team of the Drupal content management system addressed several flaws that could be exploited for remote code execution. The remaining vulnerabilities addressed in the CMS have been assigned a moderately critical rating. The vulnerabilities have been addressed with the release of Drupal 7.60, 8.6.2 and 8.5.85.60. The team urges users to install security updates as soon as possible, there is the concrete risk that threat actors in the wild will start to exploit flaw in massive hacking campaigns.”]
Source: https://securityaffairs.co/wordpress/77241/hacking/drupal-rce.html