Tag: cve 2026 118539
2 articles
Drupal patches Commerce Core flaw under active exploitation
A critical flaw in the popular Commerce Core module, known as CVE-2026-118539, is under active exploitation - and Drupal is urging administrators to upgrade immediately to protect against potential financial losses. This vulnerability allows unauthenticated attackers to bypass access controls, putting your online store at risk.
Drupal Flaw Exploited Actively in Wild
Drupal warns of a highly critical flaw in its Commerce Core component that's already being exploited in the wild, allowing unauthorized access that could have serious financial implications. This vulnerability affects Commerce Core releases from 0.0.0 to 2.41 and 3.0.0 to 3.3.13.