CoreUnion
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CoreShop | 3 | – | Oct 30, 2026 |
Exploited and recent CVEs
- CVE-2026-119656 CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList 0.3%
- CVE-2026-119655 CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList 0.3%
- CVE-2026-108696 CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship 0.2%