Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#Commerce

1 articles

Deep Dive

Drupal Commerce Access Bypass, Exploited in the Wild (CVE-2026-118539)

Drupal Commerce before 2.41 and 3.3.13 lets limited users take over other vendors' variations and coupons via JSON:API; exploited.

Ostorlab Team
Oct 30, 2026