Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

Drupal warns that attackers are actively exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk.