PT-2026-6918 · Tasin1025 · Swiftbuy

Maloyroyorko · Publicado 2026-02-07 · Atualizado 2026-03-05 · CVE-2026-2110

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tasin1025 SwiftBuy versions prior to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7

Description A security flaw exists in Tasin1025 SwiftBuy. The issue involves improper restriction of excessive authentication attempts within an unknown functionality of the /login.php file. Remote exploitation is possible, though considered difficult. The exploit has been publicly released. The product utilizes a rolling release model, and the vendor did not respond to early disclosure attempts.

Recommendations Update to version 0f5011372e8d1d7edfd642d57d721c9fadc54ec7 or later.

Exploit

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

CWE-799

Identificadores relacionados

CVE-2026-2110

Produtos afetados

Swiftbuy

Referências · 10

• 🔥 https://websecurityinsights.my.id/2026/01/swiftbuy-v-10-loginphp-no-limit-to.html · Exploit
• https://vuldb.com/?ctiid.344686 · Nota
• https://t.me/cveNotify/151262 · Publicação no Telegram
• https://vuldb.com/?id.344686 · Nota
• https://osv.dev/vulnerability/CVE-2026-2110 · Aviso do Fabricante
• https://t.me/cveNotify/154395 · Publicação no Telegram
• https://vuldb.com/?submit.746251 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2110 · Nota de Segurança
• https://t.me/CVEtracker/44049 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2020239242006581617 · Publicação no Twitter