CVE-2026-115323 | evershopcommerce EverShop up to 2.2.0 Customer Address API authorization

October 22, 2026 Yanac

A vulnerability classified as critical has been found in evershopcommerce EverShop up to 2.2.0. The affected element is an unknown function of the component Customer Address API. Performing a manipulation results in missing authorization.

This vulnerability is reported as CVE-2026-115323. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More