# Hackers exploit critical Drupal Commerce Core authorization bypass flaw

Attackers are actively exploiting a highly critical authorization bypass vulnerability in Drupal Commerce Core. The flaw could allow access-control bypasses and compromise e-commerce sites running affected versions. Administrators should apply available patches or mitigations immediately.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/10/hackers-actively-exploit-highly.html) — Fri, 30 Oct 2026 13:15:30 +0530