CVE-2026-15089

A critical vulnerability in Drupal Commerce's guest registration feature allows unauthorized access, potentially enabling attackers to exploit user data or perform actions on behalf of legitimate users. Organizations utilizing affected versions of Commerce guest registration should prioritize immediate remediation to mitigate the risk of data breaches and unauthorized transactions.