Drupal core 11.4.10 is a security release fixing:

- **SA-CORE-2026-014**: Critical, remote code execution
- **SA-CORE-2026-015**: Moderately critical, cross-site scripting
- **SA-CORE-2026-016**: Moderately critical, cross-site scripting