7 matches found
CVE-2026-19838
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
CVE-2026-19838
CVE-2026-19838 affects Webkul Bagisto up to 2.4.4, targeting the Backend Reporting Endpoint under /admin/reporting/sales/. The issue is an authorization bypass in an unknown code path of the Backend Reporting Endpoint, with remote exploitation possible. Public exploitation has been disclosed. The...
EUVD-2026-58710
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
CVE-2026-19838
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
PT-2026-72049
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
CVE-2026-19838: Authorization Bypass Through User-Controlled Key
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
com.alexnederlof:jasperreports-plugin (1.6), org.appverse.web.framework.modules.backend.reporting:appverse-web-modules-backend-reporting (>=1.0.3, <=1.5.4-release) potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (5.0.1)
net.sf.jasperreports:jasperreports MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.alexnederlof:jasperreports-plugin 1.6 -...