Description
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Drupal | Commerce PayPal | affected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://www.drupal.org/sa-contrib-2026-095 |
|
History
Wed, 02 Sep 2026 13:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3. | |
| Title | Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095 | |
| Weaknesses | CWE-863 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: drupal
Published:
Updated: 2026-09-02T12:32:41.731Z
Reserved: 2026-08-12T17:21:18.776Z
Link: CVE-2026-73475
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-09-02T13:18:08.300
Modified: 2026-09-02T13:53:45.597
Link: CVE-2026-73475
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-863
Incorrect Authorization