CVE-2026-49775

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Welcart e-Commerce versions up to 2.11.28 have an issue with unauthenticated access that can lead to broken access control.

Organizations may be exposed to unauthorized access to sensitive data, potentially compromising confidentiality and integrity.

It is recommended to update Welcart e-Commerce to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.