PT-2026-6918 · Tasin1025 · Swiftbuy

Maloyroyorko · Published 2026-02-07 · Updated 2026-03-05 · CVE-2026-2110

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tasin1025 SwiftBuy versions prior to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7

Description A security flaw exists in Tasin1025 SwiftBuy. The issue involves improper restriction of excessive authentication attempts within an unknown functionality of the /login.php file. Remote exploitation is possible, though considered difficult. The exploit has been publicly released. The product utilizes a rolling release model, and the vendor did not respond to early disclosure attempts.

Recommendations Update to version 0f5011372e8d1d7edfd642d57d721c9fadc54ec7 or later.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-799

Related Identifiers

CVE-2026-2110

Affected Products

Swiftbuy

References · 10

• 🔥 https://websecurityinsights.my.id/2026/01/swiftbuy-v-10-loginphp-no-limit-to.html · Exploit
• https://osv.dev/vulnerability/CVE-2026-2110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2110 · Security Note
• https://vuldb.com/?ctiid.344686 · Note
• https://t.me/cveNotify/151262 · Telegram Post
• https://vuldb.com/?id.344686 · Note
• https://t.me/cveNotify/154395 · Telegram Post
• https://vuldb.com/?submit.746251 · Note
• https://t.me/CVEtracker/44049 · Telegram Post
• https://twitter.com/CVEnew/status/2020239242006581617 · Twitter Post