Vulnerabilities

TI-2026-68324 CVE-2026-105573 · GHSA-jpjc-25ch-39rm

Business logic error in newbee-mall shopping cart quantity handler

MEDIUM 57

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00229 Published 2026-10-06 No fix listed CWE-840

TI-2026-63282 CVE-2026-94045 · GHSA-92hr-qfch-w4h7

MEDIUM 56

A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00415 Published 2026-09-20 No fix listed CWE-79

TI-2026-02270 CVE-2026-2658 · GHSA-9pjv-cqr5-4xh7

MEDIUM 57

A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00315 Published 2026-02-18 No fix listed CWE-352

TI-2026-21210 CVE-2026-26219 · GHSA-r8m3-w58q-qp9h

MEDIUM 47

newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00227 Published 2026-02-12 No fix listed CWE-327

TI-2026-21209 CVE-2026-26218 · GHSA-3qgp-4ccx-9wvf

MEDIUM 48

newbee-mall includes pre-seeded administrator accounts in its database initialization script.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00436 Published 2026-02-12 No fix listed CWE-798

TI-2025-14012 CVE-2025-15360 · GHSA-3gq6-fx9q-4r9m

MEDIUM 56

A vulnerability was determined in newbee-mall-plus 2.0.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00411 Published 2025-12-30 No fix listed CWE-284