innocommerce

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

innocommerce records in CISA KEV

No innocommerce vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-06712 CVE-2026-7630 · GHSA-qhv3-37x7-hpc6

innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

HIGH 70

A vulnerability has been found in innocommerce InnoShop up to 0.7.8.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00433 Published 2026-05-02 No fix listed CWE-287

TI-2026-70575 CVE-2026-108591 · GHSA-93ww-wv4j-3wjq

Local file disclosure in InnoShop AI Core MCP file_upload tool

LOW 26

InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.0027 Published 2026-10-10 No fix listed CWE-73

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0