Drupal Commerce Core

• CVE-2026-118539 Medium 6.5 Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 0.7%
• CVE-2026-118540 Unrated Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255 0.1%
• CVE-2026-118541 Unrated Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256 0.1%
• CVE-2026-118542 Unrated Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257 0.1%
• CVE-2026-118543 Unrated Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258 0.1%
• CVE-2026-118544 Unrated Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259 0.1%
• CVE-2026-10769 Medium 5.4 Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041 0.2%