PT-2026-145658

CVE-2026-126742

Published

2026-11-11

Updated

2026-11-11

Score

N/A

Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Commerce sermpea module provides Commerce support for Spanish banks that use Sermepa/Redsys systems.

The module does not verify that a Redsys payment response belongs to the order it is processed for, which can lead to incorrect order payment status.

Vendors

Affected products

Related identifiers

DRUPAL-CONTRIB-2026-333

Found an issue in the description? Have something to add? Feel free to write us 👾