CVE-2026-86669

A remote improper authentication vulnerability in aircheng-org iWebShop-5 (versions up to 5.15 ) affects the Login function in controllers/systemseller.php. Manipulating the Name argument allows an unauthenticated remote attacker to bypass authentication. The project scores CVSS 3.1: 7.3 (HIGH) w...