Security public service announcements: Upcoming critical Drupal core release on October 14, 2026 - PSA-2026-10-12

Date: 2026-October-12 Security risk: Critical 19 ∕ 25 AC:Complex/A:None/CI:All/II:All/E:Theoretical/TD:All Description: There will be a Drupal core security release for all supported branches on October 14, 2026 between 16:00 and 21:00 UTC . (To see this in your local timezone, refer to the Drupal Core Calendar .) Based on our analysis this vulnerability rates at 19/25 on our risk calculator. The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hours or days.