Skip to content
OpenAdvisories

Vendor

CoreUnion

3 known vulnerabilities.

Products

CoreShop 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108696

    CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship

    CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated customers to act on other customers' orders by supplying user-controlled ids. Attackers can omit the data field in OrderConfirm or supply an…

    CoreUnion CoreShop