CVE-2026-34018

概要

参考情報

• community.cubecart.com/t/cubecart-6-6-0-released-the-biggest-update-in-years/62405 · Release Notes
• jvn.jp/en/jp/JVN78422311 · Third Party Advisory

cubecart のその他の脆弱性

• CVE-2026-35496中 5.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-l…
• CVE-2026-21719高 8.6An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute …
• CVE-2025-59413中 6.5CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows…
• CVE-2025-59412中 5.4CubeCart is an ecommerce software solution. Prior to version 6.5.11, a vulnerability exists in the product reviews feature where user-suppli…
• CVE-2025-59411中 5.4CubeCart is an ecommerce software solution. Prior to version 6.5.11, the contact form’s Enquiry field accepts raw HTML and that HTML is incl…