CVE ID :CVE-2026-111277 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111277 - NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download

VERWANDTEARTIKEL

CVE-2026-75941 - Lenovo Legion Zone Remote Code Execution Vulnerability

CVE-2026-111366 - cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

CVE-2026-111352 - ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

CVE-2026-111356 - MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

CVE-2026-111347 - go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

CVE-2026-111329 - JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console