CVE-2026-54642 | CubeCart up to 6.7.4 Admin Panel orders.index.inc.php reset_id/delete_card cross-site request forgery

September 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in CubeCart up to 6.7.4. This issue affects the function reset_id/delete_card of the file admin/sources/orders.index.inc.php of the component Admin Panel. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is registered as CVE-2026-54642. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More