Critical Authorization Bypass Flaw Exploited in Drupal Commerce Core

Published: 30 Oct 2026 · Worldwide

Hackers are actively exploiting a critical authorization bypass vulnerability in Drupal Commerce Core affecting versions up to 3.3.13. This flaw allows unauthorized access in the shopping cart module, posing risks to online stores using affected versions.

Who is at risk

Drupal Commerce site administrators and users

How to protect yourself

• Update Drupal Commerce Core to the latest version immediately
• Review access controls and monitor for suspicious activity
• Apply security patches as soon as they are released

Source: The Hacker News (thehackernews.com)

Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語

🔔 Scam alerts

Check a suspicious message now →

All latest scams →