Drupal Commerce Core access-bypass flaw exploited (CVE-2026-118539)
Drupal says CVE-2026-118539, a highly critical access bypass in Commerce Core, is exploited in the wild. Fixes are in 3.3.13 and 8.x-2.41. Audit orders for tampering.
Drupal says CVE-2026-118539, a highly critical access bypass in Commerce Core, is exploited in the wild. Fixes are in 3.3.13 and 8.x-2.41. Audit orders for tampering.