CVE-2026-110121 | PickMall Lilishop up to 4.4 Goods Update Endpoint update goodsId authorization

October 13, 2026 Yanac

A vulnerability was found in PickMall Lilishop up to 4.4. It has been rated as problematic. This affects an unknown part of the file /store/goods/goods/update of the component Goods Update Endpoint. Performing a manipulation of the argument goodsId results in authorization bypass.

This vulnerability is reported as CVE-2026-110121. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More