CVE-2026-9726

The Drupal AlternativeCommerce (Basket) module is vulnerable to PHP Object Injection due to the insufficient sanitization of user-supplied data before it is passed to the PHP unserialize() function. This vulnerability affects versions 0.0.0 through 2.1.17 . An attacker can provide a crafted paylo...