{"product":"drupal","productName":"Drupal","version":"10.3.14","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2025-06-16","cycle":"10.3"},"counts":{"critical":1,"high":0,"medium":12,"low":2,"unknown":3},"vulnerabilities":[{"id":"CVE-2026-9082","severity":"critical","score":9.8,"kev":true,"fixedIn":"10.4.10","advisoryUrl":"https://www.drupal.org/sa-core-2026-004"},{"id":"CVE-2026-6366","severity":"medium","score":6.6,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-002"},{"id":"CVE-2026-6365","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-001"},{"id":"CVE-2026-55806","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-007"},{"id":"CVE-2026-55804","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-006"},{"id":"CVE-2026-55803","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-005"},{"id":"CVE-2025-13081","severity":"medium","score":5.9,"kev":false,"fixedIn":"10.4.9","advisoryUrl":"https://www.drupal.org/sa-core-2025-006"},{"id":"CVE-2026-55808","severity":"medium","score":5.4,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-009"},{"id":"CVE-2026-55805","severity":"medium","score":5.4,"kev":false,"fixedIn":"11.3.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-012"},{"id":"CVE-2025-13080","severity":"medium","score":5.3,"kev":false,"fixedIn":"10.4.9","advisoryUrl":"https://www.drupal.org/sa-core-2025-005"}],"moreVulnerabilities":8,"upgrade":{"recommended":"11.3.20"},"notes":[],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-24T23:52:50.693Z"}