Vendure Core存在SQL注入漏洞(CVE-2026-40887)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.sentinelone.com/vulnerability-database/cve-2026-40887/
• https://www.endorlabs.com/vulnerability/cve-2026-40887
• https://www.cve.org/CVERecord?id=CVE-2026-40887
• https://github.com/advisories/GHSA-9pp3-53p2-ww9v
• https://advisories.gitlab.com/npm/@vendure/core/CVE-2026-40887/
• https://www.tenable.com/cve/CVE-2026-40887
• https://www.codeant.ai/vulnerability-database/cve-2026-40887
• https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2026-40887
• https://leakycreds.com/vulnerability/CVE-2026-40887
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40887.yaml

Related Vulnerabilities

• PoCCVE-2026-40887: Vendure Core - SQL Injection
• Vendure /shop-api SQL 注入漏洞（CVE-2026-40887）
• PoCCVE-2024-48914: Vendure - Arbitrary File Read
• Vendure /assets 文件读取漏洞（CVE-2024-48914）
• Vendure 存在任意文件读取（CVE-2024-48914）
• Vendure 存在路径遍历漏洞