Drupal security advisory (AV26-1047)

Serial number: AV26-1047
Date: October 15, 2026

As of October 14, 2026, Drupal is affected by vulnerabilities in the following product:

  • Drupal core
    • Prior to 11.4.10
    • Prior to 11.3.19
    • Prior to 10.6.19

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

Date modified: