
Drupal Commerce flaw exploited against online stores; patch urged now
Drupal warned on 28 October 2026 that a highly critical access flaw in its Commerce Core module, used by over 42,000 sites, is being exploited; store owners should update and audit orders.









