CVE-2026-2347
published 2026-05-14CVE-2026-2347: Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.43%
34.1th percentile
Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking.
This issue affects E-Commerce Website: before 4.5.001.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| akilli_commerce_software_technologies_ltd_co | e-commerce_website | < 4.5.001 | 4.5.001 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Akilli E-Commerce Website up to 4.5.0 authorization
vuldb·2026-05-14·CVSS 9.8
CVE-2026-2347 [CRITICAL] Akilli E-Commerce Website up to 4.5.0 authorization
A vulnerability marked as critical has been reported in Akilli E-Commerce Website up to 4.5.0. Affected is an unknown function. The manipulation leads to authorization bypass.
This vulnerability is uniquely identified as CVE-2026-2347. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
GHSA
GHSA-q88p-27gr-q4g5: Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd
ghsa_unreviewed·2026-05-14
CVE-2026-2347 [CRITICAL] CWE-639 GHSA-q88p-27gr-q4g5: Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd
Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking.
This issue affects E-Commerce Website: before 4.5.001.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-14
Published