CVE-2026-73475

Drupal Commerce PayPal is susceptible to an incorrect authorization vulnerability that enables forceful browsing, potentially allowing unauthorized users to access restricted resources. Organizations using affected versions (0.0.0 to 1.12.0 and 2.0.0 to 2.1.3) should prioritize remediation to mitigate risks associated with unauthorized access and data exposure. Immediate attention is recommended for e-commerce platforms relying on these versions to ensure the integrity and security of user transactions.