Dossier
Drupal Security Team
Coverage of Drupal Security Team in the Nexus archive.
- Clear your calendar, Drupal user: You have a critically urgent patch to install
A critical vulnerability has been found in Drupal core, prompting the Drupal Security Team to warn users to install a patch immediately. The vulnerability is highly severe and could allow attackers to access or modify non-public data on affected sites. Patches will be released on Wednesday for all supported core branches.
- Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
Drupal will release urgent core security updates on May 20, 2026, and is advising sites to prepare for the update. The Drupal Security Team warns that exploits may be developed within hours or days. Sites are urged to reserve time for core updates from 5-9 p.m. UTC.