CVE-2026-109393 | Webkul QloApps up to 1.7.0 Back-office AJAX Handlers resource injection

October 12, 2026 Yanac

A vulnerability marked as critical has been reported in Webkul QloApps up to 1.7.0. The impacted element is an unknown function of the component Back-office AJAX Handlers. Performing a manipulation results in improper control of resource identifiers.

This vulnerability was named CVE-2026-109393. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More