{"product":"drupal","productName":"Drupal","version":"9.5.11","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2023-11-01","cycle":"9.5"},"counts":{"critical":5,"high":2,"medium":18,"low":2,"unknown":2},"vulnerabilities":[{"id":"CVE-2026-9082","severity":"critical","score":9.8,"kev":true,"fixedIn":"10.4.10","advisoryUrl":"https://www.drupal.org/sa-core-2026-004"},{"id":"CVE-2024-55638","severity":"critical","score":9.8,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-008"},{"id":"CVE-2024-55637","severity":"critical","score":9.8,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-007"},{"id":"CVE-2024-55636","severity":"critical","score":9.8,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-006"},{"id":"CVE-2023-5256","severity":"critical","score":7.5,"kev":false,"advisoryUrl":"https://www.drupal.org/sa-core-2023-006"},{"id":"CVE-2024-55634","severity":"high","score":8.1,"kev":false,"fixedIn":"10.2.11","advisoryUrl":"https://www.drupal.org/sa-core-2024-004"},{"id":"CVE-2025-31674","severity":"high","score":7.5,"kev":false,"fixedIn":"10.3.13","advisoryUrl":"https://www.drupal.org/sa-core-2025-003"},{"id":"CVE-2026-6366","severity":"medium","score":6.6,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-002"},{"id":"CVE-2026-6365","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-001"},{"id":"CVE-2025-3057","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.3.13","advisoryUrl":"https://www.drupal.org/sa-core-2025-001"}],"moreVulnerabilities":19,"upgrade":{"recommended":"11.3.20"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T21:52:52.791Z"}