CERT24CVE-2026-9726 — Drupal AlternativeCommerce (Basket): Highly critical — Arbitrary PHP code execution — SA-CONTRIB-2026-038Loading data…
CERT24Threat Observatory
Period

CVE-2026-9726 — Drupal AlternativeCommerce (Basket): Highly critical — Arbitrary PHP code execution — SA-CONTRIB-2026-038

The Drupal AlternativeCommerce (Basket) module provides e-commerce and checkout functionality. The module does not sufficiently sanitize user-supplied data before passing it to PHP’s unserialize().

← Back to intelligence

CVE-2026-9726 — Drupal AlternativeCommerce (Basket): Highly critical — Arbitrary PHP code execution — SA-CONTRIB-2026-038

The Drupal AlternativeCommerce (Basket) module provides e-commerce and checkout functionality. The module does not sufficiently sanitize user-supplied data before passing it to PHP’s unserialize().