Project: 
Mollie for Drupal
Project machine name: 
mollie
Date: 
2026-November-11
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Information disclosure
Affected versions: 
<2.3.2
CVE IDs: 
CVE-2026-126738
Description: 

This module enables you to accept online payments on your website using Mollie.

In some cases the Mollie secret token can be exposed.

This vulnerability is mitigated by the fact that the mollie_webform submodule must be enabled.

Solution: 

Install the latest version:

  • If you use the 2.x branch of the Mollie module, upgrade to Mollie 2.3.2.
Reported By: 
Fixed By: 
Coordinated By: