RiskWire Real-time vulnerability intelligence

This week Pricing Live dashboard

CVE-2026-118539

Active Exploitation of Drupal Commerce Core Vulnerability CVE-2026-118539

Vendor / product: Drupal Commerce Core

Public PoC: Yes

First tracked by RiskWire: 2026-10-30

Sources & citations (2)

Drupal Commerce Vulnerability CVE-2026-118539 Exploited in the Wild securityonline.info · 2026-10-29
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw thehackernews.com · 2026-10-30

References

View on NVD ↗ View on MITRE CVE ↗ Search CISA ↗ KEV lookup tool

See CVE-2026-118539 in context

RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.

Book a 20-min demo →