Medium severity4.8NVD Advisory· Published Jul 10, 2026· Updated Aug 6, 2026
CVE-2026-13238
CVE-2026-13238
Description
Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0.0 to 3.0.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:stella:commerce_realex_\/_global_payments:*:*:*:*:*:drupal:*:*Range: <3.0.2
Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-058nvdVendor Advisory
News mentions
0No linked articles in our index yet.