CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-81159

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 17.4%

CVSS Severity

CVSS v3 Score 3.7

References

https://www.drupal.org/sa-contrib-2026-106

Products affected by CVE-2026-81159

Centarro » Commerce Cybersource » Version: 8.x-1.0

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.0
Centarro » Commerce Cybersource » Version: 8.x-1.1

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.1
Centarro » Commerce Cybersource » Version: 8.x-1.2

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.2
Centarro » Commerce Cybersource » Version: 8.x-1.3

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.3
Centarro » Commerce Cybersource » Version: 8.x-1.4

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.4
Centarro » Commerce Cybersource » Version: 8.x-1.5

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.5
Centarro » Commerce Cybersource » Version: 8.x-1.6

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.6
Centarro » Commerce Cybersource » Version: 8.x-1.7

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.7
Centarro » Commerce Cybersource » Version: 8.x-1.8

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.8
Centarro » Commerce Cybersource » Version: 8.x-1.9

cpe:2.3:a:centarro:commerce_cybersource:8.x-1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-81159

Products

Pricing

Contact Us