CVE-2026-126742

The Commerce sermpea module provides Commerce support for Spanish banks that use Sermepa/Redsys systems. The module does not verify that a Redsys payment response belongs to the order it is processed for, which can lead to incorrect order payment status...

DRUPAL-CONTRIB-2026-333

The Commerce sermpea module provides Commerce support for Spanish banks that use Sermepa/Redsys systems. The module does not verify that a Redsys payment response belongs to the order it is processed for, which can lead to incorrect order payment status...

PT-2026-145658

The Commerce sermpea module provides Commerce support for Spanish banks that use Sermepa/Redsys systems. The module does not verify that a Redsys payment response belongs to the order it is processed for, which can lead to incorrect order payment status...