CVE-2024-55637

score

<0.1

cvss

9.8

epss

0.8%

published

2024-12-10

kev added

—

first seen

2026-10-21

Drupal Core from versions 8.0.0 before 10.2.11, 10.3.0 before 10.3.9, and 11.0.0 before 11.0.8 contains a deserialization of untrusted data caused by insecure deserialization in a chain of methods, letting attackers potentially achieve remote code execution if deserialization occurs on untrusted data, exploit requires deserialization of untrusted data.