CVE-2026-8772
published 2026-05-18CVE-2026-8772: A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation…
PriorityP430medium4.7CVSS 3.1
AVNACLPRHUINSUCLILAL
EPSS
0.21%
10.7th percentile
A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
| linlinjava | litemall | — | — |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
nvdv4.02.0LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.05.8MEDIUMAV:N/AC:L/Au:M/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5x7m-fp78-pgfp: A weakness has been identified in linlinjava litemall up to 1
ghsa_unreviewed·2026-05-18
CVE-2026-8772 [LOW] CWE-74 GHSA-5x7m-fp78-pgfp: A weakness has been identified in linlinjava litemall up to 1
A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.
VulDB
linlinjava litemall up to 1.8.0 Admin Endpoint sql injection
vuldb·2026-05-17·CVSS 2.0
CVE-2026-8772 [LOW] linlinjava litemall up to 1.8.0 Admin Endpoint sql injection
A vulnerability was found in linlinjava litemall up to 1.8.0 and classified as critical. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection.
This vulnerability is handled as CVE-2026-8772. The attack can be executed remotely. Additionally, an exploit exists.
Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-18
Published