CVE-2026-110607

The BizSpring Shop (specifically through commit cf22d39daaf1 ) contains a payment verification bypass vulnerability. The flaw resides in the PaymentController.testPostPay handler, allowing authenticated buyers to mark orders as paid without actual payment. An attacker can generate a payment log v...