SecurityAttackers are abusing Drupal Commerce Core. Patch nowDrupal says attackers are abusing a “highly critical” access bypass in Commerce Core. 42,000+ sites use it. Patches are out; order audits urged.2 Nov 2026
