Unauthenticated Spree Commerce users can view completed guest orders by Order ID
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2026-25757 | 6 Feb 202622:37 | – | attackerkb |
 | CVE-2026-25757 | 5 Feb 202613:46 | – | circl |
 | Spree 安全漏洞 | 6 Feb 202600:00 | – | cnnvd |
 | CVE-2026-25757 | 6 Feb 202622:37 | – | cve |
 | CVE-2026-25757 Unauthenticated Spree Commerce users can view completed guest orders by Order ID | 6 Feb 202622:37 | – | cvelist |
 | CVE-2026-25757 | 6 Feb 202623:15 | – | nvd |
 | GHSA-P6PV-Q7RC-G4H9 Unauthenticated Spree Commerce users can view completed guest orders by Order ID | 5 Feb 202621:13 | – | osv |
 | PT-2026-6726 | 5 Feb 202600:00 | – | ptsecurity |
 | CVE-2026-25757 | 8 Feb 202601:21 | – | redhatcve |
 | Unauthenticated Spree Commerce users can view completed guest orders by Order ID | 5 Feb 202600:00 | – | rubygems |
10
Node
OR
spree_storefrontRange5.3.0–5.3.2rubygems
spree_storefrontRange5.2.0–5.2.7rubygems
spree_storefrontRange5.1.0–5.1.10rubygems
spree_storefrontRange<5.0.8rubygems
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Feb 2026 17:16Current
5.5Medium risk
Vulners AI Score5.5
CVSS 3.15.3
CVSS 48.7
EPSS0.00442
SSVC