Vulnerability DRUPAL-CONTRIB-2026-333
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
13 hours ago
November 11, 2026 at 06:01 PM UTC
No summary available
<2.5.0
<2.5.0
Details
The Commerce sermpea module provides Commerce support for Spanish banks that use Sermepa/Redsys systems.
The module does not verify that a Redsys payment response belongs to the order it is processed for, which can lead to incorrect order payment status.
References
Impacted packages
Timeline
Published
13 hours ago
November 11, 2026 at 06:01 PM UTC
Last Modified
12 hours ago
November 11, 2026 at 06:45 PM UTC