CoreUnion CoreShop

• CVE-2026-119656 High 7.5 CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList 0.3%
• CVE-2026-119655 High 7.5 CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList 0.3%
• CVE-2026-108696 Medium 4.3 CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship 0.2%