Cybersecurity
Hackers Actively Exploit Critical Authorization Bypass in Drupal Commerce Core
Drupal has issued a warning regarding the active exploitation of a highly critical security flaw in its Commerce Core module, identified as CVE-2026-118539. The vulnerability allows attackers to bypass authorization controls on specific routes and entity fields, potentially causing financial harm to vendors using affected versions.