Question 1

What is CVE-2026-10769 — CVE-2026-10769?

Accepted Answer

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versions: from 3.3.0 to 3.3.6.

Question 2

What is the authoritative source for CVE-2026-10769?

Accepted Answer

CVE-2026-10769 (CVE-2026-10769) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-10769CVE-2026-10769

Description

Scoring