Security Signal

← Cyber news feed

Reported 70Actively exploitedFirst seen 30 Oct 2026, 07:45 UTC

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Coverage

HeadlineSourceTypePublished
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw The Hacker NewsSecurity press30 Oct 2026, 07:45 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-118539 No — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source70
Independent organisations reporting it (1)+0
Confirmed by an official source or CISA KEV+0
Confidence70 · Reported
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.