CVE-2026-118540 | Drupal Commerce Core Module up to 2.40/3.1.x improper authorization

October 30, 2026 Yanac

A vulnerability, which was classified as critical, was found in Drupal Commerce Core Module up to 2.40/3.1.x. Impacted is an unknown function. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-118540. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More