CVE-2026-13238

The Drupal Commerce Realex / Global Payments module (versions 0.0.0 to 3.0.2 ) contains an Incorrect Authorization vulnerability that allows Forceful Browsing . The root cause is that the module fails to sufficiently verify the authenticity of the payment response returned by Global Payments when...