https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:44:37.319795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-97301 EUVD-2026-97301 2026-10-09T13:44:37.323503+00:00 EUVD-2026-97301 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0808 fkie_cve-2014-0808 2026-10-09T13:44:37.323538+00:00

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request.

 https://cve.radiocsirt.org/vuln/ghsa-j2hg-w4p4-6rvm GHSA-j2hg-w4p4-6rvm — EC-CUBE vulnerable to authorization bypass 2026-10-09T13:44:37.323570+00:00

Affected: Packagist: ec-cube/ec-cube

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request.

 https://cve.radiocsirt.org/vuln/gsd-2014-0808 gsd-2014-0808 2026-10-09T13:44:37.323593+00:00 gsd-2014-0808 https://cve.radiocsirt.org/vuln/jvndb-2014-000006 jvndb-2014-000006 2026-10-09T13:44:37.323605+00:00

EC-CUBE contains an authorization bypass vulnerability. EC-CUBE from EC-CUBE CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains an authorization bypass vulnerability (CWE-639). The developer reported this vulnerability to JPCERT/CC under Information Security Early Warning Partnership.