SPIN Unprocessed October 30, 2026 ai_technology cybersecurity
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
View original on thehackernews.comOverview
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. "This module enables you to sell goods and services to customers through an included shopping cart
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
- Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
- 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
- The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO