Drupal 7.x — End of Life
EOL Medium riskDrupal 7.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 7LTS | Jan 5, 2011 | Nov 19, 2015 | Jan 5, 2025 | 7.103 | EOL |
CVEs affecting Drupal 7.x (5)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-55808 | MEDIUM | 5.4 | 0.16% | — | 7 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core… | Jul 10, 2026 |
| CVE-2026-55807 | LOW | 3.1 | 0.14% | — | 7 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Forgery. This issue af… | Jul 10, 2026 |
| CVE-2026-55806 | MEDIUM | 5.9 | 0.21% | — | 7 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This is… | Jul 10, 2026 |
| CVE-2026-55804 | MEDIUM | 5.9 | 0.21% | — | 7 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow… | Jul 10, 2026 |
| CVE-2026-55803 | MEDIUM | 5.9 | 0.21% | — | 7 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow… | Jul 10, 2026 |
Drupal 7.x is EOL — migrate to Drupal 8.x
Drupal 8.x is the next major release. Plan your upgrade before Drupal 7.x stops receiving security patches.
Frequently asked questions
Is Drupal 7 end of life?
Yes. All Drupal 7.x releases have reached end of life and no longer receive security patches. There are 5 known CVEs affecting Drupal 7.x. Migrate to Drupal 8.x as soon as possible.
What CVEs affect Drupal 7?
There are 5 CVEs tracked for Drupal 7.x. See the full list above with CVSS and EPSS scores.
What is the latest Drupal 7 version?
The latest Drupal 7.x patch release is 7.103, released on December 4, 2024. Always run the latest patch to benefit from all security fixes.
How to migrate from Drupal 7 to Drupal 8?
To migrate from Drupal 7 to Drupal 8: (1) review the official Drupal 8 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Drupal 7 in production?
No. Drupal 7 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA