CVE-2026-62989 | Shopper Labs up to 2.9.x Variants Livewire Variants.php callTableAction/callTableBulkAction privileges management

October 30, 2026 Yanac

A vulnerability labeled as problematic has been found in Shopper Labs Shopper up to 2.9.x. Affected by this vulnerability is the function callTableAction/callTableBulkAction of the file packages/admin/src/Livewire/Components/Products/Form/Variants.php of the component Variants Livewire Component. Executing a manipulation can lead to improper privilege management.

This vulnerability appears as CVE-2026-62989. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More