Question 1

What is CVE-2026-13238 — CVE-2026-13238?

Accepted Answer

Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0.0 to 3.0.2.

Question 2

What is the authoritative source for CVE-2026-13238?

Accepted Answer

CVE-2026-13238 (CVE-2026-13238) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-13238CVE-2026-13238

Description

Scoring