Drupal
Drupal – A flexible PHP-based CMS with a scalable architecture
Drupal is a free, open-source content management system built for complex, data-rich websites with robust workflows and multilingual support.
Official WebsiteCategory
CMS & SSG
First Release
2000
License
GPLv2 or later
Maintained By
Dries Buytaert
Latest News
Cloudflare Adds Seven WAF Rules Against PHP2Shell RCE Flaws in PHP
Cloudflare shipped seven emergency WAF rules on October 21 to block exploits of two critical PHP remote code execution flaws (CVE-2026-109618 and CVE-2026-109619), but it calls them a stopgap, and patching to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 remains the only full fix.
PHP 8.5.12 and Older Branches Patch Two Critical RCE Flaws
PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619, two unauthenticated remote code execution bugs rated CVSS 9.2 that affect PHP 5.4 through 8.5.11, with no complete mitigation besides updating.
Critical Remote Code Execution Vulnerability Found in Drupal Core
Drupal has disclosed a critical remote code execution flaw affecting multiple versions of its core software, requiring immediate updates to protect server infrastructure.
Drupal Core Security Update Scheduled for October 14
Drupal maintainers have announced a critical security release scheduled for October 14 and advise administrators to prepare for immediate patching.
Drupal Security Team Schedules Critical Patch for September 23
Drupal administrators must prepare for a critical security update targeting a widely used contributed module scheduled for release on September 23, 2026.
Difficulty
Moderate due to its extensive API, module ecosystem, and advanced site-building concepts requiring PHP and system administration knowledge.