https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T17:23:53.007828+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111354 fkie_cve-2026-111354 2026-10-20T17:23:53.036774+00:00

crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.

 https://db.gcve.eu/vuln/ghsa-73p2-fh3g-2wf2 GHSA-73p2-fh3g-2wf2 2026-10-20T17:23:53.036886+00:00

crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.