Drupal Commerce Core authorization bypass flaw actively exploited ho raha hai
Yahan publish hua 31 Oct, 5:45 pm IST · Source ki tareekh 30 Oct, 1:15 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
CVE‑2026‑118539 me missing authorization bug Drupal Commerce Core ko target karta hai, attackers bina permission ke shop functions access kar rahe hain.
Aapko kya karna haiDrupal sites ko patch karein aur affected modules ko update karein.
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- CISA ne is flaw ko KEV me add kiya tha.Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw ↗
Aapki raay