CVE-2026-96600 | Contao Isotope eCommerce up to 2.9.10 Backend Callbacks sql injection

September 23, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Contao Isotope eCommerce up to 2.9.10. The affected element is an unknown function of the component Backend Callbacks. This manipulation causes sql injection.

This vulnerability is tracked as CVE-2026-96600. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More