The site is running Drupal 8 which we obtained from nikto.

nikto -host 10.9.15.11

A quick search to search sploit gives us following results

searchsploit drupal 8

Initial Compromise