Drupal has announced an upcoming highly critical Drupal core security release scheduled for Wednesday, May 20, 2026, between 1:00 PM and 5:00 PM EDT.

Reliable Penguin is monitoring the release window and will review the advisory as soon as Drupal publishes the update. If any hosted or managed Drupal sites are affected, we will prioritize applying the required security updates and mitigation steps.

Drupal has indicated that not all configurations may be affected, but site owners should reserve time during the release window to evaluate and apply updates promptly. Exploit details may become available within hours or days after disclosure.

Read the official Drupal security release notice

For urgent questions, please contact Reliable Penguin support.