CVE-2026-16641

CriticalCVSS 9.8

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Vulnerability in Drupal Commerce Elavon. This issue affects all versions.

The vulnerability may allow an attacker to manipulate payments, potentially leading to financial loss or data breach.

Update the Commerce Elavon module to a version that includes the security fix.

Original NVD description (English source)

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.