CVE-2026-118541 | Commerce Core Extension up to 2.40.x/3.3.12 improper authorization

October 30, 2026 Yanac

A vulnerability was found in Commerce Core Extension up to 2.40.x/3.3.12. It has been rated as problematic. Affected is an unknown function. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-118541. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More