CVE-2026-118557
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 30, 2026
Vendor
unknown
Description
Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.