Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Drupal core may let attackers take control
published 3 months ago
Summary
The core files that run Drupal sites have been found to contain many security weaknesses. These weaknesses could let a malicious user gain control of the website, steal information, or disrupt service. Install the new Drupal core version 8.9.20-p1+tuxcare as soon as possible to protect the site.
What to do
- Update drupal drupal/core to version 8.9.20-p1+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Packagist | drupal | drupal/core |
>= 8.9.20, < 8.9.20-p1+tuxcare Fix: upgrade to 8.9.20-p1+tuxcare
|
Original advisory text
TuxCare security update for drupal/core (21 CVEs)
TuxCare rebuilt drupal/core to address 21 CVEs. Fixed in 8.9.20-p1+tuxcare.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1784682869 · OSV
Track software like this
Free during beta