Access Control – Security Blog https://blog.siteguarding.com Sat, 31 Oct 2026 08:18:28 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg Access Control – Security Blog https://blog.siteguarding.com 32 32 Drupal Commerce Access Bypass Under Attack: Patch and Audit https://www.siteguarding.com/security-blog/drupal-commerce-access-bypass-store-fix/ Sat, 31 Oct 2026 08:18:28 +0000 https://www.siteguarding.com/security-blog/drupal-commerce-access-bypass-store-fix/ Drupal has confirmed active exploitation of CVE-2026-118539, a highly critical Drupal Commerce access bypass that lets requests reach store routes and data they should never touch. Updating the module closes the hole, but you also need to check whether anyone changed your orders, prices or checkout settings while it was open. Key takeaways CVE-2026-118539 is a missing-authorization flaw in Drupal...

Source

]]>