CVE-2026-118543CWE-352

CVE-2026-118543: falha em Drupal Commerce Core

Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258

Publicada em

Seguir esta CVE+ Monitorar Commerce Core+ Monitorar drupal/commerce

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.1%
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.
Produtos afetados
Drupal · Commerce Core
CVEs relacionadas — Drupal Commerce Core

No mesmo produto, das mais perigosas para as menos.

CVE-2026-118539MEDIUMCommerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254EPSS 0.3%CVE-2026-10769MEDIUMCommerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041EPSS 0.2%CVE-2026-118540—Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255EPSS 0.1%CVE-2026-118541—Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256EPSS 0.1%CVE-2026-118542—Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257EPSS 0.1%CVE-2026-118544—Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259EPSS 0.1%