yuwkaaa/CVE-2026-112071

PoC

unauthenticated order cancellation in TYPO3 EXT:shop

view exploit source poc_in_githubauthor yuwkaaapublished 2026-10-20catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-112071US—OT elevatedExploit
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that a…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan