CVE-2026-86665 | aircheng-org iWebShop-5 up to 5.15 controllers/update.php Update::index authorization

A vulnerability classified as critical has been found in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization.

This vulnerability is referenced as CVE-2026-86665. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More