Security News Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw TheHackerNews Daniel Bender 30 Oct 2026 Share Drupal warns of active exploitation of CVE-2026-118539 in Commerce Core, an authorization bypass flaw that may financially impact vendors.