CVE-2026-111354 | Crmeb Java up to 3.1 /api/front/order/express orderId authorization

October 15, 2026 Yanac

A vulnerability was found in Crmeb Java up to 3.1. It has been declared as problematic. Impacted is an unknown function of the file /api/front/order/express. Such manipulation of the argument orderId leads to authorization bypass.

This vulnerability is documented as CVE-2026-111354. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More