CVE-2026-118558 | Drupal Commerce Stripe up to 2.2.2 cross-site request forgery

October 30, 2026 Yanac

A vulnerability described as problematic has been identified in Drupal Commerce Stripe up to 2.2.2. The impacted element is an unknown function. Such manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2026-118558. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More