Drupal warns of critical Commerce Core flaw exploited in attacks

Drupal has urged administrators to immediately patch a critical access bypass vulnerability affecting the Commerce Core module. Threat actors are actively exploiting this flaw in the wild, posing a significant risk to affected e-commerce platforms.