Drupal has patched CVE-2026-118539, an exploited Commerce Core access bypass that may financially impact online store owners.

Explore the latest news, real-world incidents, expert analysis, and trends in Drupal — only on The Hacker News, the leading ...

Drupal confirmed active exploitation of a critical Commerce Core vulnerability that bypasses access checks and puts online stores at risk.

Drupal says CVE-2026-118539 is being exploited against 42,000-plus sites, pushing Commerce Core users to patch and review ...

Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are ...

John Watters, chief executive officer at iCounter, said this one's important because Drupal Commerce Core runs on more than ...

Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores ...

On October 21, 2026, a maximum-severity vulnerability with a score of 9.2 (CVSS v4.0), known as 'CVE-2026-109618' and ...

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible ...

North Korean hackers stole $6.43 billion from Binance in the largest crypto theft on record, while Chinese state actors built rotating relay networks and attackers poisoned trusted software extensions ...

Researchers say attackers combined PHP RCE with a Linux kernel flaw to root vulnerable firewall appliances, establish ...

CrowdStrike urges businesses to adopt a multi-layered website security strategy that goes beyond patching, combining access controls, firewalls, continuous monitoring, secure development, backups, ...