CVE-2026-118556 | Drupal Commerce Shipping up to 2.15.x/3.0.5 improper authorization

October 30, 2026 Yanac

A vulnerability categorized as critical has been discovered in Drupal Commerce Shipping up to 2.15.x/3.0.5. Affected by this vulnerability is an unknown functionality. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-118556. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More