Cubecart

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 38
    Known Exploited: 0
    7
    Critical Level Threats
    12
    High Level Threats
    18
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-45708

    CubeCart: Authenticated RCE via Invoice Template → Order Print

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-45055

    CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-45714

    CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-45054

    CubeCart: Authenticated SQL Injection via `sort[]` Parameter in Admin Orders Transactions Listing

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-45053

    CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files API

    Last Modified: May 15, 2026
    Published: May 13, 2026
    Items Per Page
    Cubecart Vulnerabilities & Security CVEs | CVE-DB