Low severity3.7NVD Advisory· Published Sep 2, 2026· Updated Sep 16, 2026
CVE-2026-81159
CVE-2026-81159
Description
Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 0.0.0 - 1.10.0
- cpe:2.3:a:centarro:commerce_cybersource:*:*:*:*:*:drupal:*:*Range: >=8.x-1.0,<8.x-1.10
Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-106nvdVendor Advisory
News mentions
1- Drupal: 25 Vulnerabilities Disclosed Together on September 2, 2026Vypr Intelligence · Sep 2, 2026