CVE-2026-121628 | Bagisto up to 2.3.15/2.4.0 Onepage Orders Checkout manageCartRule race condition

A vulnerability, which was classified as problematic, was found in Bagisto up to 2.3.15/2.4.0. The affected element is the function manageCartRule of the component Onepage Orders Checkout. Such manipulation leads to race condition.

This vulnerability is uniquely identified as CVE-2026-121628. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More