Back to overview

CVE-2026-9726

Description
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affects Drupal AlternativeCommerce (Basket) versions: from 0.0.0 to 2.1.17.

Metadata

CVE ID
CVE-2026-9726
State
PUBLISHED
Assigner
drupal
Reserved
2026-05-27 16:44 UTC
Published
2026-07-10 20:56 UTC
Last updated
2026-07-10 20:56 UTC
Primary CWE
CWE-915
CWE-915 Improperly Controlled Modification of Dynamically-De…
Vendor / Product
Drupal / Drupal AlternativeCommerce (Basket)
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
Drupal Drupal AlternativeCommerce (Basket) — 0.0.0 < 2.1.17
Weakness (CWE)
CWESourceDescription
CWE-915 cna CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes
References (1)
Back to overview