Drupal security advisory (AV26-1105)

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number:</strong> AV26-1105<br /><strong>Date:</strong> October 30, 2026</p>

As of October 28, 2026, Drupal is affected by a vulnerability in the following product:

  • Commerce Core
    • Versions prior to 2.41 and 3.0.0 versions prior to 3.3.13

Open-source reporting indicates that CVE-2026-118539 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

</div>

Article Link: Drupal security advisory (AV26-1105) - Canadian Centre for Cyber Security