Drupal Commerce: news, advisories and analysis

CyberSecureToday covers Drupal Commerce in a story published 1 Nov 2026. The coverage includes 1 vulnerability advisory. 1 advisory is rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Drupal Commerce most often intersect with Drupal, Authorization Bypass and E-Commerce Security, with Retail & E-commerce the most affected sector. The most recent story, “Drupal Commerce Core Critical Authorization Bypass Flaw Under Active Exploitation (CVE-2026-118539)”, was published 1 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.