CVE-2026-63461 | VendureHQ Vendure up to 3.6.4 Shop API access control

A vulnerability classified as problematic was found in VendureHQ Vendure up to 3.6.4. The impacted element is an unknown function of the component Shop API. Such manipulation leads to improper access controls.

This vulnerability is referenced as CVE-2026-63461. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More