CVE-2026-86665

Name of the Vulnerable Software and Affected Versions iWebShop-5 versions prior to 5.16

Description A missing authorization issue exists in the Update::index() function within the controllers/update.php file. This flaw allows remote attackers to perform unauthorized actions by manipulating the request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Update::index() function in the controllers/update.php file.