CVE-2026-118544 | BDVDB-2026-398362 Detail
DrupalCommerce Core
Description#
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.
Impact#
CAPEC-87 Forceful Browsing
Weaknesses#
- CWE-202 Exposure of Sensitive Information Through Data Queries
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.