CVE-2026-56828 in Shopper

Prediction

by VulDB Data Team • 09/12/2026

A weakness has been identified in shopperlabs Shopper up to 2.8.0. This affects the function togglePermission of the file packages/admin/src/Livewire/Components/Settings/Team/Permissions.php of the component Permissions. This manipulation of the argument ID causes improper authorization. Remote exploitation of the attack is possible.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Moderation: accepted
• Entry: VDB-403016
• CPE: ready
• CWE: CWE-285 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-56828
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56828
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-56828/