CVE-2026-96378 | Drupal Commerce Decoupled Checkout up to 1.7.x code injection

October 22, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Drupal Commerce Decoupled Checkout up to 1.7.x. The impacted element is an unknown function. Executing a manipulation can lead to code injection.

This vulnerability is handled as CVE-2026-96378. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More