Drupal Closes Access Bypass Vulnerability in Core Engine Posted on April 21, 2017 by Simon Steed Drupal released a point update for its core engine to patch a critical access bypass vulnerability.