CVE-2026-71531 | PrestaShop up to 8.2.8/9.2.0 Webservice API WebserviceRequest.php shopHasRight id_shop/id_shop_group improper authorization

A vulnerability was found in PrestaShop up to 8.2.8/9.2.0. It has been declared as critical. The affected element is the function shopHasRight of the file classes/webservice/WebserviceRequest.php of the component Webservice API. Such manipulation of the argument id_shop/id_shop_group leads to improper authorization.

This vulnerability is documented as CVE-2026-71531. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More