https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T16:19:23.836763+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212152 EUVD-2026-212152 2026-10-18T16:19:23.839512+00:00 EUVD-2026-212152 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27919 fkie_cve-2023-27919 2026-10-18T16:19:23.839543+00:00

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.

 https://cve.radiocsirt.org/vuln/ghsa-v4hm-xqrg-4qfp GHSA-v4hm-xqrg-4qfp 2026-10-18T16:19:23.839572+00:00

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.

 https://cve.radiocsirt.org/vuln/gsd-2023-27919 gsd-2023-27919 2026-10-18T16:19:23.839588+00:00 gsd-2023-27919 https://cve.radiocsirt.org/vuln/jvndb-2023-000038 jvndb-2023-000038 2026-10-18T16:19:23.839599+00:00

EC-CUBE plugin "NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)" provided by NE Inc. contains an authentication bypass vulnerability (CWE-287). TSUKADA Nobuhisa of Seasoft reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.