CVE-2026-31867Updated Mar 12, 2026 · PUBLISHEDDescriptionNo description imported yet.Full record on cve.org →Affected packagesPackageVendor / ProductVersion rangeStatuscommercecraftcms / commerce>= 4.0.0, < 4.11.0affectedcommercecraftcms / commerce>= 5.0.0, < 5.6.0affected