CVE-2026-118557 | Drupal Commerce Shipping up to 2.15.x/3.0.5 improper authorization

A vulnerability was found in Drupal Commerce Shipping up to 2.15.x/3.0.5. It has been declared as problematic. This impacts an unknown function. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-118557. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More