Skip to content

CVE record · 3 sources

CVE-2026-118539

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

Vendor: Drupal
Product: Commerce Core
Weakness: CWE-862
Exposure class: Web platform

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CCCS advisory CCCS 3d ago

Drupal security advisory (AV26-1105)

CVE-2026-118539 Drupal
31

Research Check Point Research 2h ago

2nd November – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 2nd November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Binance, a global cryptocurrency exchange, has suffered a cyberattack resulting…

CVE-2026-111497 CVE-2026-98432 CVE-2026-118539+1 more
7

CVE NVD 3d ago

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.

CVE-2026-118539 Drupal