https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T20:20:52.285624+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-96599 CVE-2026-96599 — Isotope eCommerce through 2.9.10 Weak Order Identifier Generation 2026-09-28T20:20:52.297967+00:00

Affected: isotope-core

Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Guest orders lack ownership verification, enabling attackers to access order details including billing address, customer information, and purchased files by supplying a guessed uid parameter.