Veille cybersecurite : Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Source : The Hacker News
Drupal has warned that threat actors are exploiting a « highly critical » security flaw in its Commerce Core component.
The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13.
« This module enables you to sell goods and services to customers through an included shopping cart
Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.