CVE-2026-39250

7.3 highEPSS 0.2%

High (7.3). EPSS 0.2% chance of exploitation in the next 30 days.

An authorization vulnerability exists in Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangerous operations.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2026-05-19
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

References

https://gist.github.com/hkdmh/4af513ea7589212cb1d49bc5d972972e
https://www.innoshop.com/

Check your stack JSON