CVE-2026-81159

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.

Scoring

Severity

LOW

CVSS base score

3.7

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS probability

0.26%

CWE

CWE-208

Published

2026-09-02

Last modified

2026-09-02

Affected products

• Drupal Commerce CyberSource

Weakness type

• CWE-208

Related vulnerabilities

• CVE-2026-87737 — An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing...
• CVE-2026-16037 — Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
• CVE-2026-84308 — phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
• CVE-2026-82449 — Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
• CVE-2026-55785 — free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
• CVE-2026-78500 — Dimension Blind SSRF via Database Test Connection Feature
• CVE-2026-80199 — Kimai before 2.54.0 Username Enumeration via Timing Oracle
• CVE-2026-18259 — Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

Markdown version · Browse all CVEs