CVE-2026-86670

Name of the Vulnerable Software and Affected Versions aircheng-org iWebShop-5 versions prior to 5.16

Description A flaw in the Authentication Storage component within the controllers/admin.php file allows remote attackers to manipulate the Password argument. This can result in the generation of password hashes with insufficient computational effort, making them easier to crack. The attack is characterized by high complexity and is considered difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.