What Is Drupalgeddon2? Drupal developers have discovered a vulnerability that could take over any Drupal website with URL access. The threat is called as Drupalgeddon2 with an official identifier CVE-2018-7600. As the name suggests, this is second iteration, the first being reported in 2014.