CVE-2026-96378

Published: Ott 22, 2026 Last Modified: Ott 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Commerce Decoupled Checkout versions: from 1.0.0 to 1.8.0.

915

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Other
Potential Impacts:
Modify Application Data Execute Unauthorized Code Or Commands Varies By Context Alter Execution Logic
Applicable Platforms
Languages: Ruby, ASP.NET, PHP, Python, Not Language-Specific
View CWE Details
https://www.drupal.org/sa-contrib-2026-179
https://www.drupal.org/sa-contrib-2026-179