CVE-2026-109173 | guchengwuyue yshop-crm up to 2.1.3 check improper authorization

October 12, 2026 Yanac

A vulnerability classified as problematic was found in guchengwuyue yshop-crm up to 2.1.3. The affected element is the function check of the file /admin-api/crm/invoice/check. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-109173. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More