CVE-2026-19997 | Webkul Bagisto up to 2.4.4 Backend Sales RMA Endpoint requests authorization

A vulnerability identified as problematic has been detected in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the file /admin/sales/rma/requests of the component Backend Sales RMA Endpoint. Performing a manipulation results in authorization bypass.

This vulnerability is reported as CVE-2026-19997. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor confirms: “The reported issues were already identified through our internal security assessment process prior to this notification and are being handled through our established internal security and development lifecycle. Some of these items have already been addressed, while the remaining items are planned for resolution in upcoming product releases.”VulDB Recent EntriesRead More