1 post
Drupal is urging admins to patch CVE-2026-118539, a missing authorization flaw in Commerce Core that attackers are already exploiting in the wild.
