Drupal has issued an alert stating that it intends to release a « core security release » for all supported branches on May 20, 2026, from 5-9 p.m. UTC.
« The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hours or days, » the maintainers of the PHP-based content management system (CMS) said.
« Not all configurations are