CVE-2026-119656 | CoreUnion CoreShop up to 1.5.5 GetGoodsPageList order sql injection

October 30, 2026 Yanac

A vulnerability was found in CoreUnion CoreShop up to 1.5.5. It has been declared as critical. This affects an unknown part of the file /api/Agent/GetGoodsPageList of the component GetGoodsPageList. Such manipulation of the argument order leads to sql injection.

This vulnerability is traded as CVE-2026-119656. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More