SQL injection

Friday 30 October 2026

Drupal warns Commerce Core access bypass is being exploited

Vulnerabilities CVE-2026-118539CVSS 6.52 min read18:05 UTC

Drupal says unauthenticated attackers are exploiting a missing authorization flaw in the Commerce Core module and is urging admins to upgrade and audit orders for inconsistencies.

Hackers Start Probing Fresh Oracle EBS Vulnerability

VulnerabilitiesExploitedCVE-2026-46817CVSS 9.82 min read05:54 UTC

Defused says its decoys logged exploratory exploitation attempts against a critical SQL injection flaw in Oracle E-Business Suite's Application Object Library, patched in Oracle's October CPU.