CVE-2026-124916 | PrestaShop up to 9.2.0 Performance debug-mode configuration debug_cookie_name/debug_cookie_value code injection

A vulnerability classified as problematic has been found in PrestaShop up to 9.2.0. Affected by this issue is some unknown functionality of the component Performance debug-mode configuration. This manipulation of the argument debug_cookie_name/debug_cookie_value causes code injection.

The identification of this vulnerability is CVE-2026-124916. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More