Commerce Shipping

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-118556 Oct 30, 03:09 PHP PATCH This Week

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

PHP Authentication Bypass Drupal Commerce Shipping

NVD

EPSS

0.1%

CVE-2026-118557 Oct 30, 03:09 PHP PATCH This Week

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

PHP Authentication Bypass Drupal Commerce Shipping

NVD

EPSS

0.1%

CVE-2026-118556 PHP

EPSS 0%

PATCH This Week

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

PHP Authentication Bypass Drupal +1

NVD

CVE-2026-118557 PHP

EPSS 0%

PATCH This Week

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

PHP Authentication Bypass Drupal +1

NVD