Skip to content
OpenAdvisories

Vendor

beikeshop

1 known vulnerabilities.

Products

beikeshop 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111657

    BeikeShop through 2.0.0.31 IDOR via RMA mark_as_shipped Endpoint

    BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify other customers' returns. Attackers can submit sequential RMA ids to the account/…

    beikeshop beikeshop