{"product":"drupal","productName":"Drupal","version":"11.0.13","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2025-06-16","cycle":"11.0"},"counts":{"critical":1,"high":0,"medium":12,"low":2,"unknown":4},"vulnerabilities":[{"id":"CVE-2026-9082","severity":"critical","score":9.8,"kev":true,"fixedIn":"11.1.10","advisoryUrl":"https://www.drupal.org/sa-core-2026-004"},{"id":"CVE-2026-6366","severity":"medium","score":6.6,"kev":false,"fixedIn":"11.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2026-002"},{"id":"CVE-2026-6365","severity":"medium","score":6.1,"kev":false,"fixedIn":"11.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2026-001"},{"id":"CVE-2026-55806","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-007"},{"id":"CVE-2026-55804","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-006"},{"id":"CVE-2026-55803","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-005"},{"id":"CVE-2025-13081","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.1.9","advisoryUrl":"https://www.drupal.org/sa-core-2025-006"},{"id":"CVE-2026-55808","severity":"medium","score":5.4,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-009"},{"id":"CVE-2026-55805","severity":"medium","score":5.4,"kev":false,"fixedIn":"11.3.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-012"},{"id":"CVE-2025-13080","severity":"medium","score":5.3,"kev":false,"fixedIn":"11.1.9","advisoryUrl":"https://www.drupal.org/sa-core-2025-005"}],"moreVulnerabilities":9,"upgrade":{"recommended":"11.3.20"},"notes":[],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-25T01:07:50.769Z"}