Veille live
Veille CyberInfra — Veille cybersecurite : CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands Veille CyberInfra — Veille cybersecurite : Hackers pull off $133 million French bank heist via service provider Veille CyberInfra — Veille cybersecurite : OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs Veille CyberInfra — Veille cybersecurite : OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits Veille CyberInfra — Veille cybersecurite : Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Veille CyberInfra — Veille cybersecurite : Fake security tools on GitHub push backdoors and infostealers Veille CyberInfra — Veille cybersecurite : CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands Veille CyberInfra — Veille cybersecurite : Hackers pull off $133 million French bank heist via service provider Veille CyberInfra — Veille cybersecurite : OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs Veille CyberInfra — Veille cybersecurite : OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits Veille CyberInfra — Veille cybersecurite : Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Veille CyberInfra — Veille cybersecurite : Fake security tools on GitHub push backdoors and infostealers

Veille cybersecurite : Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

30/10/2026

Source : The Hacker News

Drupal has warned that threat actors are exploiting a « highly critical » security flaw in its Commerce Core component.

The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13.

« This module enables you to sell goods and services to customers through an included shopping cart

Lire l’article original


Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog