Actively Exploited Drupal Commerce Core Flaw Exposes Online Stores to Authorization Bypass
RedSide Security October 31, 2026 Vulnerability 6 views
Drupal warns that attackers are actively exploiting a highly critical missing authorization flaw in Commerce Core (CVE-2026-118539), affecting versions up to 2.41 and 3.3.13 on e-commerce sites.
Patch Management
Active Exploitation
Drupal
CVE-2026-118539
Commerce Core
Authorization Bypass
E-commerce Security
Continue reading: Actively Exploited Drupal Commerce Core Flaw Expos…
