CVE-2026-2658

Medium CVSS: 5.3

A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee. Affected is an unknown function of the component Multiple Endpoints. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

Vendor

Product

CWE

CWE-352

Yayın Tarihi

2026-02-18 18:24:34

Güncelleme

2026-02-19 15:53:02

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-352 MEDIUM 2026

Referanslar

https://github.com/newbee-ltd/newbee-mall/ https://github.com/newbee-ltd/newbee-mall/issues/106 https://github.com/newbee-ltd/newbee-mall/issues/107 https://vuldb.com/?ctiid.346456 https://vuldb.com/?id.346456 https://vuldb.com/?submit.752797 https://vuldb.com/?submit.752798 https://vuldb.com/?submit.752799 https://vuldb.com/?submit.752800 https://vuldb.com/?submit.752801 https://vuldb.com/?submit.752802 https://vuldb.com/?submit.752803 https://vuldb.com/?submit.752804 https://vuldb.com/?submit.752805 https://vuldb.com/?submit.752806