Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

Drupal will release urgent core security updates on May 20, 2026, from 5-9 p.m. UTC for all supported branches, with the exact vulnerability details remaining unknown but expected to be severe.

• •Patches will be available for Drupal 11.3.x, 11.2.x, 10.6.x, and 10.5.x to address the critical security vulnerability
• •Sites on end-of-life versions (Drupal 8 and 9) will receive patch files without guarantee of effectiveness, with strong recommendations to upgrade to supported versions
• •Sites running outdated minor versions should pre-emptively update to the latest patch before May 20 to prepare for immediate security updates
• •Drupal 7 is not affected by the vulnerability and does not require security updates

This summary was automatically generated by AI based on the original article and may not be fully accurate.