CVE-2026-55804

Name of the Vulnerable Software and Affected Versions Drupal core (affected versions not specified)

Description Drupal core contains a gadget chain, which is a sequence of existing code fragments that can be leveraged during the deserialization of untrusted data. While this issue is not directly exploitable, it can serve as a vector to achieve remote code execution or SQL injection if a separate vulnerability allows an attacker to pass unsafe input to the unserialize() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.