Threats tagged 'ghsa-372m-625x-8m53'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118539Drupal Commerce Core · Missing Authorization Vulnerability High2026-10-30GCVE DatabaseCVE-2026-118539 A missing authorization vulnerability in Drupal Commerce Core allows unauthorized users to perform forceful browsing. This affects Commerce Core versions from 0.0.0 up to 2.41 and from 3.0.0 up to 3.3.13. The vulnerability is identified as CWE-862. No CVSS score or patch information is provided. Report on CVE-2026-118539 Vulnerability CWE-862 #ghsa-372m-625x-8m53	GCVE Database	2026-10-30

Page 1 of 1