CVE-2026-111277 | NivoCart up to 2.5.1 Account Order download order_id improper authorization

October 15, 2026 Yanac

A vulnerability has been found in NivoCart up to 2.5.1 and classified as problematic. This issue affects the function Download of the component Account Order. The manipulation of the argument order_id leads to improper authorization.

This vulnerability is documented as CVE-2026-111277. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More