Tag: missing authorization
3 articles
Drupal patches Commerce Core flaw under active exploitation
A critical flaw in the popular Commerce Core module, known as CVE-2026-118539, is under active exploitation - and Drupal is urging administrators to upgrade immediately to protect against potential financial losses. This vulnerability allows unauthenticated attackers to bypass access controls, putting your online store at risk.
Drupal Flaw Exploited Actively in Wild
Drupal warns of a highly critical flaw in its Commerce Core component that's already being exploited in the wild, allowing unauthorized access that could have serious financial implications. This vulnerability affects Commerce Core releases from 0.0.0 to 2.41 and 3.0.0 to 3.3.13.
CISA Warns of Active ScreenConnect Exploit in Ongoing Attacks
Beware: hackers are actively exploiting a critical flaw in ConnectWise ScreenConnect, allowing them to transfer files and execute code on vulnerable systems without permission. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning, ordering federal agencies to secure affected systems within three days.