{"product":"drupal","productName":"Drupal","version":"9.3.22","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2022-12-14","cycle":"9.3"},"counts":{"critical":4,"high":2,"medium":18,"low":2,"unknown":6},"vulnerabilities":[{"id":"CVE-2026-9082","severity":"critical","score":9.8,"kev":true,"fixedIn":"10.4.10","advisoryUrl":"https://www.drupal.org/sa-core-2026-004"},{"id":"CVE-2024-55638","severity":"critical","score":9.8,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-008"},{"id":"CVE-2024-55637","severity":"critical","score":9.8,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-007"},{"id":"CVE-2024-55636","severity":"critical","score":9.8,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-006"},{"id":"CVE-2024-55634","severity":"high","score":8.1,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-004"},{"id":"CVE-2025-31674","severity":"high","score":7.5,"kev":false,"fixedIn":"10.3.13","advisoryUrl":"https://www.drupal.org/sa-core-2025-003"},{"id":"CVE-2026-6366","severity":"medium","score":6.6,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-002"},{"id":"CVE-2026-6365","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-001"},{"id":"CVE-2025-3057","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.3.13","advisoryUrl":"https://www.drupal.org/sa-core-2025-001"},{"id":"CVE-2026-55806","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-007"}],"moreVulnerabilities":22,"upgrade":{"recommended":"11.3.20"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T21:52:52.791Z"}