All vulnerabilities
CVE-2026-110608

BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive

BizSpring BizSpring Shop
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.40%Chance of exploitation activity in the next 30 days, higher than 33% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published14 Oct 2026Updated 16 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated members to act on other members' orders by supplying their orderId. Attackers can cancel victims' pending orders to release allocated stock or confirm receipt of shipped orders, advancing fulfilment and settlement without the victim's consent.

Text from CVE List

Affected versions 2

  • BizSpring Shopaffected: all versions through cf22d39daaf17f430d8fc1fb698a2f6e515e1808CVE List
  • BizSpring Java Mallaffected: all versions through 369e88c5cda36ddcea56742c335ee1bfe50e8156CVE List

References 6