Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are ...

Drupal has patched CVE-2026-118539, an exploited Commerce Core access bypass that may financially impact online store owners.

Drupal warns of active exploitation of CVE-2026-118539 in Commerce Core, an authorization bypass flaw that may financially ...

Drupal says CVE-2026-118539 is being exploited against 42,000-plus sites, pushing Commerce Core users to patch and review ...

Drupal has rolled out patches for five vulnerabilities, including two critical-severity bugs that could be exploited for remote code execution (RCE). The first resides in the Enti ...

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.

Drupal CMS 2.2.0 makes it easier to set up and edit multilingual websites. The new version also translates configurations from recipes and supports translations directly in the visual editor Drupal ...

Drupal issued a security advisory of four critical vulnerabilities rated from moderately critical to critical. The vulnerabilities affect Drupal versions 9.3 and 9.4. The security advisory warned that ...