CVE-2026-71519 | PrestaShop up to 8.2.8/9.2.0 Webservice API shopHasRight/saveEntityFromXml access control

A vulnerability categorized as critical has been discovered in PrestaShop up to 8.2.8/9.2.0. This affects the function shopHasRight/saveEntityFromXml of the component Webservice API. Executing a manipulation can lead to improper access controls.

This vulnerability appears as CVE-2026-71519. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More