CVE-2026-100869 | Sylius up to 2.1.15/2.2.8 Shop API Endpoint privileges management

September 27, 2026 Yanac

A vulnerability was found in Sylius up to 2.1.15/2.2.8. It has been rated as problematic. Affected is an unknown function of the component Shop API Endpoint. This manipulation causes improper privilege management.

This vulnerability appears as CVE-2026-100869. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More