CVE-2024-55634

score

<0.1

cvss

8.1

epss

0.4%

published

2024-12-10

kev added

—

first seen

2026-10-21

Drupal Core versions from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, and from 11.0.0 before 11.0.8 contain a privilege escalation caused by insufficient access control, letting attackers escalate privileges, exploit requires attacker to have some level of access.