Drupal Association

Security Scorecard

Score

81C

Total CVEs

18

Patch Rate

78%

14 patched

Avg Response

56d

days to patch

Critical Gaps

0

exploitable, no detection

Severity Breakdown

Critical1
High3
Medium14
Low0

Patch Status

Patched14 (78%)
Partial/Workaround0 (0%)
Unpatched4 (22%)

CVEs (18)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-10926-Medium6.150dPatched
CVE-2025-9553-Medium5.367dUnpatched
CVE-2025-8093Drupal Authenticator Login BypassHigh8.887dUnpatched
CVE-2025-9549Facets Browsing VulnerabilityMedium6.5-Patched
CVE-2025-9550Drupal Facets XSSMedium6.1-Patched
CVE-2025-9551Drupal Protected Pages Brute Force VulnerabilityMedium6.5-Patched
CVE-2025-8995-Critical9.8124dPatched
CVE-2025-8996-Medium4.3124dPatched