https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:05:40.658865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267676 EUVD-2026-267676 2026-10-08T04:05:40.705542+00:00 EUVD-2026-267676 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25597 fkie_cve-2026-25597 2026-10-08T04:05:40.705580+00:00

PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. This vulnerability is fixed in 8.2.4 and 9.0.3.

 https://cve.radiocsirt.org/vuln/ghsa-67v7-3g49-mxh2 GHSA-67v7-3g49-mxh2 — PrestaShop affected by time based enumeration in FO login form 2026-10-08T04:05:40.705615+00:00

Affected: Packagist: prestashop/prestashop

### Impact A time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times.

### Patches 8.2.4 and 9.0.3

### Workarounds none

### References Found by Lam Yiu Tung