Skip to content

    Pages for:

  • Faculty
  • Staff
Cornell University
Cornell University
Division of Financial Services
Financial Information Services
  • About
    • Legacy Systems
      • Account Search
      • Standard Reference Numbers
      • Payment Request System
      • JEMS
    • Events
    • News
  • Get Help
    • KFS Help Request (NetID login required)
  • Get Access
  • Guides
    • KFS
      • Set Up and Manage Accounts
      • Balance Inquiries
      • Finding Account Documentation in KFS
      • Financial Processing e-doc Attachment Guidelines
      • Accounts Payable e-docs
      • Capital Assets e-docs
      • Financial Processing e-docs
        • Advance Deposit (AD)
        • Distribution of Income and Expense (DI)
        • Disbursement Voucher (DV)
          • Disbursement Voucher Payees
          • DV Payment Reason Codes
          • Standard Operating Procedure
        • General Ledger Transfer (GLT)
        • Internal Billing (IB)
        • Procurement Card Document (PCDO)
        • Pre-Encumbrance (PE)
        • Transfer of Funds (TF)
      • Labor Distribution e-docs
      • Purchasing e-docs
        • e-SHOP
        • Purchase Order (PO)
        • Purchase Order Amendment (POA)
        • Line-Item Receiving (RCVL)
        • Requisition (REQS)
        • Vendor (PVEN)
    • KDW/Reporting
      • Dashboard Guides and Tutorials
      • Answers Overview
    • FAQ
    • Glossary
    • Acronyms
  • forms
  • CU policies
  • training
  • KFS Support
  • e-SHOP
  • forms
  • CU policies
  • training
  • KFS Support
  • e-SHOP

Security Alert - Critical Drupal Update

Wednesday, May 20, 2026 - 4:45pm

<div>There will be a <strong>Drupal core security release for all supported branches on May 20, 2026, between 17:00 and 21:00 UTC</strong>. (To see this in your local timezone, refer to the <a href="https://calendar.google.com/calendar/r?cid=drupalcorecalendar@associatio... Core Calendar</a>.) The Drupal Security Team urges you to reserve time for core updates at that time because exploits <em>might</em> be developed within hours or days.<br><br></div><div>Not all configurations are affected. Reserve time on May 20 during the release window to determine whether your sites are affected and in need of an immediate update. Mitigation information will be included in the advisory.<br><br></div><div><strong>We recommend updating to the latest supported patch (bugfix) release for your site's version of Drupal before May 20</strong>, so that you can address any other upgrade issues before the security window.&nbsp;<br><br></div><div>References:<br>https://www.drupal.org/psa-2026-05-18</div>

More info on IT@Cornell site: 
http://itservicealerts.hosting.cornell.edu/view/7769

Division of Financial Services

377 Pine Tree Road, East Hill Plaza
Ithaca, NY 14850

Hours:  8:00 a.m. - 4:30 p.m., Monday - Friday

 

CONTACT US


  • DFS Home
  • Website Feedback
  • Contact DFS
  • CUInfo
  • For DFS Staff
  • Executive Vice President and CFO
  • University Audit Office
  • Office of University Investments
  • Division of Budget and Planning
  • Risk Management and Insurance
  • Cornell University Policy Office
  • Alliance for Diversity and Inclusion
  • Cornell United Way
  • Campus Alerts
  • COVID-19 Etiquette for Faculty and Staff

©2026 Cornell University

Web Accessibility Assistance