CVE-2026-118541
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 30, 2026
Vendor
unknown
Description
Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.