CVE-2026-39250

Published: May 19, 2026Modified: Jul 24, 2026Deferred

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An authorization vulnerability exists in Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangerous operations.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://gist.github.com/hkdmh/4af513ea7589212cb1d49bc5d972972e

Source: cve@mitre.org

https://www.innoshop.com/

Source: cve@mitre.org

Timeline

No history available yet.