The Project Update Bot is refreshed for Drupal 12 readiness with over 80% automated coverage for deprecated APIs
Drupal.org updates its Project Update Bot for Drupal 12, achieving over 80% automated coverage for deprecated APIs, enhancing API management and software development processes.
Drupal Issues Highly Critical Patch, Exploits Expected Within Hours
Drupal has issued a highly critical security patch for versions 11.3.x through 10.5.x, warning of potential exploits within hours of release. The patch addresses a vulnerability that could lead to ma...ss exploitation, similar to past incidents like Drupalgeddon. Site administrators are advised to prepare for immediate deployment upon the patch's release.
Drupal has issued an urgent security update for CVE-2026-9082, a critical vulnerability affecting multiple versions of its CMS. The flaw allows attackers to bypass authentication and execute arbitrar...y code. Drupal released patches to address this issue, urging immediate updates to prevent exploitation. Thousands of sites are at risk, highlighting the need for rapid response and ongoing security vigilance.
Drupal has patched a highly critical SQL injection vulnerability (CVE-2026-9082) affecting PostgreSQL-backed deployments. The flaw in Drupal's database abstraction API allows arbitrary SQL execution,... posing risks like unauthorized data access and remote code execution. Affected versions include Drupal 8.9.0 through 11.3.9. Users should upgrade to the latest patched versions to secure their systems.
Drupal Core Patch Drops Today: No-Login Flaw Puts Government and ...
Drupal has released critical security patches for all supported core branches to address a no-login vulnerability, PSA-2026-05-18, which poses significant risks to government and university sites. Th...e flaw, requiring no authentication, could lead to data breaches if not patched immediately. The urgency is heightened by the potential for rapid exploit development, mirroring past widespread vulnerabilities like Drupalgeddon2.
Drupal Critical Security Update May 2026 Emergency Patch
Drupal released an emergency security patch on May 20, 2026, to address a critical vulnerability in its core components affecting versions 7, 8, 9, and 10. The flaw poses immediate risks to all insta...llations, with potential exploits expected within hours. Administrators are urged to deploy the patch immediately to mitigate the threat.
Clear your calendar, Drupal user: You have a critically urgent patch to ...
Drupal has issued an urgent security patch for a critical vulnerability in Drupal core, affecting versions back to 8.9. The vulnerability, scoring 20 out of 25 on severity, allows unauthorized data a...ccess and modification. Users are advised to update immediately, with patches available for both supported and some unsupported versions.
Drupal to Patch Highly Critical Vulnerability at Risk of Quick ...
Drupal is set to release patches for a highly critical vulnerability affecting its content management system on May 20. The vulnerability could be exploited shortly after disclosure, prompting users ...to prepare for immediate updates. Patches will cover Drupal versions 11.3.x, 11.2.x, 10.6.x, and 10.5.x.
Drupal CMS 2.0: AI functions, visual page builder, and templates
Drupal.org has launched Drupal CMS 2.0, featuring a new visual page builder, AI functions, and ready-made templates. The update simplifies website creation with a drag-and-drop interface and integrat...es AI tools for site building and content generation. The release also includes performance improvements and new integrations with services like Mailchimp. Drupal aims to evolve into an AI-first CMS with future expansions.
DRUPAL REINVENTS OPEN SOURCE CONTENT MANAGEMENT WITH LAUNCH OF DRUPAL CMS 2.0 -- New Visual Builder, AI and Templates Redefine Enterprise Web Publishing - PRWeb
Drupal.org has launched Drupal CMS 2.0, introducing a visual page-building interface called Drupal Canvas. This update aims to simplify enterprise web publishing by enabling marketers and content tea...ms to create professional websites quickly without developer reliance. Key features include drag-and-drop components, pre-built templates, AI-powered tools, and one-click integrations. The release enhances Drupal's accessibility and scalability, maintaining its open-source foundation.
Drupal.org has released the Drupal CMS Launcher, a standalone app designed to simplify the local setup of Drupal CMS. The app, which uses PHP and Composer, allows users to run Drupal CMS with minimal... setup, supporting SQLite databases and offering a basic environment for site builders and evaluators. It is available for Windows, macOS, and Linux.
