#Drupal Commerce

Hackers actively exploit critical Drupal Commerce Core authorization bypass flaw

Drupal says CVE-2026-118539, a missing-authorization flaw in Commerce Core, is being exploited in the wild. Fixes are available in versions 3.3.13 and 8.x-2.41.

4h ago