{"cvss":6.5,"datePublished":"","dateUpdated":"","description":"Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 | Affected: Drupal / Commerce Core | CVSS: 6.5 (MEDIUM) | EPSS: 0.00305 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-118539","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Commerce Core","severity":"MEDIUM","source":"circl_kev","title":"CVE-2026-118539","vendor":""}