newbee-ltd

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

newbee-ltd records in CISA KEV

No newbee-ltd vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2026-68324 CVE-2026-105573 · GHSA-jpjc-25ch-39rm

MEDIUM 57

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00229 Published 2026-10-06 No fix listed CWE-840

TI-2026-02270 CVE-2026-2658 · GHSA-9pjv-cqr5-4xh7

MEDIUM 57

A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00315 Published 2026-02-18 No fix listed CWE-352

TI-2026-63282 CVE-2026-94045 · GHSA-92hr-qfch-w4h7

MEDIUM 56

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00415 Published 2026-09-20 No fix listed CWE-79

TI-2025-14012 CVE-2025-15360 · GHSA-3gq6-fx9q-4r9m

MEDIUM 56

A vulnerability was determined in newbee-mall-plus 2.0.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00411 Published 2025-12-30 No fix listed CWE-284

TI-2026-21209 CVE-2026-26218 · GHSA-3qgp-4ccx-9wvf

MEDIUM 48

newbee-mall includes pre-seeded administrator accounts in its database initialization script.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00426 Published 2026-02-12 No fix listed CWE-798

TI-2026-21210 CVE-2026-26219 · GHSA-r8m3-w58q-qp9h

MEDIUM 47

newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00222 Published 2026-02-12 No fix listed CWE-327