CoreUnion

Products

ProductCVEsExploitedLatest
CoreShop3–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-119656 High 7.5 CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList 0.3%
  • CVE-2026-119655 High 7.5 CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList 0.3%
  • CVE-2026-108696 Medium 4.3 CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship 0.2%