Product by Drupal

Commerce Core

7 known vulnerabilities in Commerce Core (Drupal), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Commerce Core (Drupal)

Medium	CVE-2026-10769	Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041 also in 4 other products	5.4	10.07.2026
Critical	CVE-2026-118539	Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 also in 18 other products	—	30.10.2026
Not rated	CVE-2026-118540	Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255 also in 18 other products	—	30.10.2026
Not rated	CVE-2026-118541	Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256 also in 18 other products	—	30.10.2026
Not rated	CVE-2026-118542	Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257 also in 18 other products	—	30.10.2026
Not rated	CVE-2026-118543	Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258 also in 18 other products	—	30.10.2026
Not rated	CVE-2026-118544	Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259 also in 18 other products	—	30.10.2026