1,166 CVEs
8 in CISA KEV
Drupal Vulnerabilities
CVE security advisories and vulnerability history for Drupal.
1,166
Total CVEs
Published
8
In CISA KEV
Exploited in the wild
42
Public exploits
PoC or exploit code
5.4
Avg CVSS
CVE security advisories and vulnerability history for Drupal.
Drupal has 1,166 published CVE records since 2005, of which 8 are in CISA's Known Exploited Vulnerabilities catalog and 42 have a known public exploit. The average CVSS base score across scored CVEs is 5.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Drupal products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on Drupal's vulnerability posture, as a share of its 1,166 published CVEs.
across 1,166 scored CVEs
224 of 1,166 scored
8 of 1,166 CVEs
42 of 1,166 CVEs
446 of 1,166 CVEs
How the CVSS severity of Drupal's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
8
8 of Drupal's CVEs are confirmed exploited in the wild.
Public exploits
42
42 of Drupal's CVEs have a known public exploit available.
The Drupal products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in Drupal CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish Drupal CVE records.
How many Drupal CVEs were published each year.
The most recently disclosed vulnerabilities affecting Drupal.
Browse vulnerabilities for other tracked vendors.
Common questions about Drupal vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new Drupal vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
Track new Drupal CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor Drupal CVEs