Skip to content
Threat Feed
Subscribe

Product

Shopper/Framework (>= 2.8.0, < 2.9.2)

1 brief RSS
high advisory

Authorization Bypass in Shopper Framework CollectionProducts Component

An authorization bypass vulnerability in the Shopper framework allows authenticated users with limited privileges to perform unauthorized product deletions across any collection in the database.

shopper/framework +1 web-application privilege-escalation auth-bypass web-vulnerability authorization-bypass shopper cve-2026-56828 cms
2t