CVE-2026-54648 | CubeCart up to 6.7.4 GDPR Tools customers.gdpr.inc.php privileges management

September 18, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in CubeCart up to 6.7.4. This vulnerability affects unknown code of the file admin/sources/customers.gdpr.inc.php of the component GDPR Tools. Performing a manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-54648. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More