Drupal warns of critical Commerce Core flaw exploited in attacks

Drupal has issued a warning to administrators about a critical access bypass vulnerability in the Commerce Core module. The flaw is being actively exploited in the wild, making it a high-priority security concern. Drupal is urging all affected site owners to apply the available patch immediately. The vulnerability could allow attackers to bypass access controls within the Commerce Core functionality. Active exploitation in real-world attacks elevates the urgency of remediation. No further details about specific CVE identifiers or threat actors were mentioned in the available content.