CVE-2026-118539 | Drupal Commerce Core up to 2.40/3.3.12 improper authorization

October 30, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Drupal Commerce Core up to 2.40/3.3.12. This issue affects some unknown processing. This manipulation causes improper authorization.

This vulnerability is registered as CVE-2026-118539. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More