Tag: CVE-2026-118539

Drupal Commerce orders are being lifted through a route guard gap

Drupal rates the Commerce Core access bypass 21 out of 25 and says it is already being exploited against stores…