unscored
CVE-2026-118544
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing.
Impact
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Commerce Core | from 3.0.0 before 3.3.13 from 0.0.0 before 2.41.0 |