PT-2026-42008 · Innoshop · Innoshop

Published 2026-05-19 · Updated 2026-05-20 · CVE-2026-39250

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Innoshop version 0.6.0

Description An authorization issue allows an attacker who has logged into the frontend to directly access backend application interfaces, which can lead to the execution of dangerous operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-39250

Affected Products

Innoshop

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-39250 · Security Note
• https://gist.github.com/hkdmh/4af513ea7589212cb1d49bc5d972972e · Note
• https://twitter.com/infoflowcloud/status/2056994879989805357 · Twitter Post
• https://twitter.com/CVEnew/status/2056994228757205309 · Twitter Post
• https://t.me/CVEtracker/54286 · Telegram Post
• https://innoshop.com · Note