Security Vulnerability in Drupal Commerce Affecting Guest Registration
CVE-2026-15089

Currently unrated

Key Information:

Vendor

Drupal
Status
Commerce Guest Registration
Vendor
CVE Published:
10 July 2026

What is CVE-2026-15089?

A security vulnerability in Drupal Commerce affects the guest registration process, potentially allowing unauthorized access or exploitation. This flaw impacts all versions of the guest registration component in Drupal Commerce. Users and administrators are encouraged to examine their current implementations and update to the latest secure versions to mitigate risks. More details can be found in the Drupal security advisory.

Affected Version(s)

Commerce guest registration *.*

References

https://www.drupal.org/sa-contrib-2026-079

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.