BeikeShop - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/beikeshop/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 07:32:03 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgBeikeShop: Guest Order Lookup parameter manipulation (CVE-2026-124576)https://feed.craftedsignal.io/briefs/2026-11-beikeshop-order-repo/Mon, 09 Nov 2026 07:32:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-beikeshop-order-repo/A security flaw in BeikeShop up to 2.0.0.31 in the Guest Order Lookup feature allows for remote manipulation of the order_number argument.A security flaw has been discovered in BeikeShop up to 2.0.0.31. The vulnerability exists in the OrderRepo::getOrderByNumber function within beike/Repositories/OrderRepo.php of the Guest Order Lookup component. Manipulation of the order_number argument results in the enforcement of behavioral workflow. The attack can be initiated remotely.

]]>highadvisoryweb-vulnerabilitycve-2026-124576