CVE-2026-15089: Drupal Commerce Guest Registration

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Vulnerability in Drupal Commerce guest registration. This issue affects Commerce guest registration versions: *.*.

Affected products

• Drupal Commerce Guest Registration

Published 2026-07-10. Last modified 2026-08-25.