Drupal Commerce Core vulnerabilities

Newest CVEs

• CVE-2026-118539

  Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254

  Drupal · Commerce Core

  Medium6.5
• CVE-2026-118540

  Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255

  Drupal · Commerce Core

  Medium5.3
• CVE-2026-118541

  Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256

  Drupal · Commerce Core

  Medium4.3
• CVE-2026-118542

  Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257

  Drupal · Commerce Core

  Low2.7
• CVE-2026-118543

  Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258

  Drupal · Commerce Core

  Medium5.3
• CVE-2026-118544

  Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259

  Drupal · Commerce Core

  Low3.7
• CVE-2026-10769

  Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041

  Drupal · Commerce Core

  Medium5.4