CVE-2026-105571 | PickMall Lilishop up to 4.2.4 Mobile Binding bindMobile username improper authorization (Issue 148)

October 5, 2026 Yanac

A vulnerability classified as critical has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization.

The identification of this vulnerability is CVE-2026-105571. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More