CVE-2026-105573 | newbee-ltd newbee-mall up to 2.7.5 Shopping Cart Quantity updateAccountHeadAndDetail goodsCount logic error (Issue 127)

SecurityVulns
Yanac

A vulnerability, which was classified as problematic, has been found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors.

This vulnerability is identified as CVE-2026-105573. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More