CVE-2024-55636

score

<0.1

cvss

9.8

epss

0.9%

published

2024-12-10

kev added

—

first seen

2026-10-21

Drupal Core from versions 8.0.0 before 10.2.11, 10.3.0 before 10.3.9, and 11.0.0 before 11.0.8 contains a deserialization of untrusted data caused by insecure deserialization in a chain of methods, letting attackers potentially achieve remote code execution if the application deserializes untrusted data, exploit requires deserialization of untrusted data.