Drupal ↗

Drupal · CMS

Track your version:Monitors Drupal and tailors your dashboard to that exact version.

11.4.4 · latest cycle100/100 Healthy

Summary iPlain-English security verdict for Drupal, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Drupal currently scores 100/100 — healthy. 1 actively-exploited vulnerability (CISA KEV) affects older releases (e.g. CVE-2026-9082) — staying on the latest supported version keeps you clear of it. The latest supported release is 11.4.4. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for Drupal each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2026-9082 CRITICAL exploited SQL injection EPSS 85% → fixed in 11.3.10

See all 9 known Drupal CVEs & security history →

Get alerted about Drupal

Be emailed the moment Drupal gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Drupal — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Drupal release line is supported — and when it sunsets. Select a line for its full report.

Jul7'27 Drupal 11.4EOL 2027-07-07

Dec16'26 Drupal 11.3EOL 2026-12-16

Dec16'26 Drupal 10.6EOL 2026-12-16

Jun17'26 Drupal 11.2ended 2026-06-17

Jun17'26 Drupal 10.5ended 2026-06-17

Dec10'25 Drupal 10.4ended 2025-12-10

Dec10'25 Drupal 11.1ended 2025-12-10

Jun16'25 Drupal 11.0ended 2025-06-16

Jun16'25 Drupal 10.3ended 2025-06-16

Jan5'25 Drupal 7ended 2025-01-05

Dec17'24 Drupal 10.2ended 2024-12-17

Jun20'24 Drupal 10.1ended 2024-06-20

Full Drupal end-of-life dates & support timeline →

11.4 latest 11.4.4 Supported until 2027-07-0711.4.4 → 11.3 latest 11.3.16 Supported until 2026-12-1611.3.16 → 10.6 latest 10.6.14 Supported until 2026-12-1610.6.14 → 11.2 latest 11.2.14 End of life ended 2026-06-1711.2.14 → 10.5 latest 10.5.12 End of life ended 2026-06-1710.5.12 → 10.4 latest 10.4.10 End of life ended 2025-12-1010.4.10 → 11.1 latest 11.1.10 End of life ended 2025-12-1011.1.10 → 11.0 latest 11.0.13 End of life ended 2025-06-1611.0.13 → 10.3 latest 10.3.14 End of life ended 2025-06-1610.3.14 → 10.2 latest 10.2.12 End of life ended 2024-12-1710.2.12 → See all upcoming end-of-life dates →

Frequently asked

Is Drupal safe and patched?

What should I do about Drupal now?

Upgrade Drupal to the latest supported release (11.4.4) or later, which clears the actively-exploited issues affecting older versions, then confirm against Drupal's official advisory.

When does Drupal reach end-of-life?

The latest supported Drupal release is 11.4.4. After end-of-life a release no longer receives security patches.

Which versions of Drupal are still receiving security updates?

Supported Drupal release lines (latest 11.4.4): 11.4, 11.3, 10.6. End-of-life releases no longer receive security patches.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Drupal's official advisory before you patch or upgrade — Drupal official site ↗