CVE-2026-114387 | Shopperlabs Shopper up to 2.5.x Admin Panel /livewire/update togglePermission authorization

October 21, 2026 Yanac

A vulnerability described as critical has been identified in Shopperlabs Shopper up to 2.5.x. Affected is the function CreateTeamMember::store/Permissions::togglePermission of the file /livewire/update of the component Admin Panel. Executing a manipulation can lead to missing authorization.

This vulnerability is handled as CVE-2026-114387. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More