03/15/2017 08:21 PM EDT
Original release date: March 15, 2017
Drupal has released an advisory to address vulnerabilities in Drupal core 8.x versions prior to 8.2.7. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
US-CERT encourages users and administrators to review Drupal’s Security Advisory and apply the necessary update.