Drupal 10's security support ends December 9, 2026. 1 For any of the following still running Drupal 10, that date is the real deadline, not a rumor, not a vendor sales pitch:
- state agencies
- counties
- municipalities
- SUNY/CUNY or community college sites
Here's what it means and how to plan around it.
What “end of life” actually means
After December 9, 2026, Drupal 10 stops receiving official core security releases. 1 Your site will keep running (nothing breaks that day), but every vulnerability discovered in core after that point goes unpatched unless you upgrade to Drupal 11. For public-sector sites handling resident data, benefits applications, or campus records, that's not a risk most teams can carry quietly.
Why NY agencies and campuses should plan now, not in November
Public-sector budget cycles and procurement timelines move more slowly than a software release calendar. An upgrade that could be scoped and budgeted calmly in October becomes an emergency in December. Small web teams are common across NY counties, libraries, and mid-size campuses. They rarely have spare capacity to absorb an unplanned migration on top of daily operations. Starting the assessment now gives you room to sequence the work around your budget cycle instead of around a deadline.
The same week, Drupal moves again
Drupal 12.0.0 and Drupal 11.5.0 are both scheduled for the week of December 7, 2026, the same week Drupal 10 support ends. 1 Waiting for Drupal 12 isn't a shortcut: the Drupal 11 upgrade already requires a site on Drupal 10.3.0 or later 2, and Drupal 10 support ends the same week 12 arrives. (More on that in our Drupal 11 upgrade checklist.)
A sensible next step
Before anything gets budgeted or scheduled, most teams just need two things: confirmation of their current Drupal version and a read on how much custom and contributed code needs review before an upgrade. The contributed Upgrade Status module is a reasonable starting point for that inventory. Run it against a staging copy of the site, not production. 2
This is the kind of groundwork we help New York public-sector and higher-ed teams work through under Drupal Care, our ongoing Drupal maintenance and upgrade support. New York State certified MBE (Empire State Development).
Talk to us about your Drupal site → neverendingsolutions.com
Related reading: Drupal 7 to Drupal 10: what we learned. If your site is still on Drupal 7, 8, or 9, that's a different (bigger) conversation than the Drupal 10 → 11 upgrade covered here.
- drupal.org — Core release cycles and support schedule, checked 2026-09-25; reconfirmed 2026-10-08. Drupal 10 security support ends December 9, 2026; Drupal 12.0.0 and 11.5.0 are scheduled for the week of December 7, 2026.
- drupal.org — How to upgrade from Drupal 10 to Drupal 11: site must be running Drupal 10.3.0 or later; Upgrade Status module identifies compatibility gaps (fetched 2026-10-08).