CVE-2026-79410 in Bagisto

Riassunto

di MITRE • 15/09/2026

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: MITRE
• Prenotare: 25/08/2026
• Divulgazione: 15/09/2026
• Moderazione: accettato
• Voce: VDB-404580
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-79410
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79410
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-79410/