CVE-2026-81159

Drupal Commerce CyberSource versions 0.0.0 to 1.10.0 are vulnerable to an observable timing discrepancy that can be exploited for brute force attacks. This vulnerability may allow attackers to gain unauthorized access by systematically guessing credentials. Organizations using affected versions should prioritize remediation to protect against potential unauthorized access.