CVE Feed

    Dashboard / CVE / CVE-2026-11462

    CVE-2026-11462

    A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function callback of the file plugins/Stripe/Controllers/StripeController.php of the component Stripe Plugin. Performing a manipulation of the argument Request results in improper authorization. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named 6719e0fc690ea0a998452092862e0f0a17c65968. It is suggested to install a patch to address this issue.

    Published:Jun 7, 2026
    Last Modified:Jun 8, 2026
    EPS:Jun 7, 2026
    EPSS Score:0.00045
    CVSS Score:7.3

    Affected Products

    Vendor
    Chengdu Everbrite Network Technology
    Product
    Beike Shop
    Vendor
    Chengdu Everbrite Network Technology
    Product
    Beikeshop

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High