Active exploitation of Drupal Commerce Core authorization bypass CVE-2026-118539
1. Executive summary Drupal has warned that threat actors are actively exploiting CVE-2026-118539, a missing authorization flaw in the Commerce Core module affecting versions
30 Oct 2026 · 4 min read
read →