CVE-2026-16641

CVE-2026-16641 affects the Drupal Commerce Elavon contrib module, with all versions listed as impacted. The Drupal security team has rated the issue Critical and marked the project as unsupported , noting that a known security issue remains unfixed by the maintainer . No specific root cause, affe...

Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Commerce Elavon - Moderately critical - Access bypass - SA-CONTRIB-2022-053

This module enables you to accept payments from the Elavon payment provider. The module doesn't sufficiently verify that it's communicating with the correct server when using the Elavon On-site payment gateway, which could lead to leaking valid payment details as well as accepting invalid payment...