https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:42:27.180161+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-03133 cnvd-2022-03133 2026-10-07T12:42:27.183913+00:00 cnvd-2022-03133 https://cve.radiocsirt.org/vuln/euvd-2026-21873 EUVD-2026-21873 2026-10-07T12:42:27.183945+00:00 EUVD-2026-21873 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20841 fkie_cve-2021-20841 2026-10-07T12:42:27.183960+00:00

Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-jc55-crg7-pr35 GHSA-jc55-crg7-pr35 — EC-CUBE Improper access control in Management screen 2026-10-07T12:42:27.183987+00:00

Affected: Packagist: ec-cube/ec-cube

Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2021-20841 gsd-2021-20841 2026-10-07T12:42:27.184009+00:00 gsd-2021-20841 https://cve.radiocsirt.org/vuln/jvndb-2021-000100 jvndb-2021-000100 2026-10-07T12:42:27.184021+00:00

EC-CUBE 2 series provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Improper access control in Management screen (CWE-284) - CVE-2021-20841 * Cross-site request forgery vulnerability in Management screen (CWE-352) - CVE-2021-20842 EC-CUBE CO.,LTD. reported these vulnerabilities to JPCERT/CC to notify users of the solution through JVN. JPCERT/CC and EC-CUBE CO.,LTD. coordinated under the Information Security Early Warning Partnership.