CERT24Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawLoading data…
CERT24Threat Observatory
Period

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Drupal reported that CVE-2026-118539, a missing-authorization vulnerability in Commerce Core, is being actively exploited in the wild. The flaw may enable access bypass and financially impact the vendor.

← Back to intelligence

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Drupal reported that CVE-2026-118539, a missing-authorization vulnerability in Commerce Core, is being actively exploited in the wild. The flaw may enable access bypass and financially impact the vendor.