Most recent entries from all

DRUPAL-CONTRIB-2026-058

Affected: Packagist:https://packages.drupal.org/8: drupal/commerce_realex

This module enables you to take payments through the Global Payments / Realex Hosted Payment Page (HPP), either via a lightbox iframe or via a full-page redirect.

When the gateway is configured with the **redirect** payment method, the module doesn't sufficiently verify the authenticity of the payment response returned by Global Payments.

The **lightbox** payment method validates the signature and is not affected, so sites that use the lightbox payment method are not affected.

EUVD-2026-336099

fkie_cve-2026-13238

Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0.0 to 3.0.2.

GHSA-2q62-xm7g-h9gh

Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0.0 to 3.0.2.

WID-SEC-W-2026-2080 — Drupal: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um Daten zu manipulieren.