CVE-2026-110951— Password Reset via Unverified Email Leading to Account Takeover in Hyper Technology's Hyper E-Commerce Infrastructure

Quick assessment

Affected

Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Hyper Teknoloji Ltd. Şti. 旗下的 Hyper E-Commerce 基础设施、Hyper E-Commerce 基础设施 - 经销商集成模块，以及 Hyper E-Commerce 基础设施 - 前台应用与管理面板存在“忘记密码功能中的弱密码恢复机制”漏洞，该漏洞可导致攻击者利用密码恢复流程进行攻击。受影响的版本包括： Hyper E-Commerce 基础设施：1.1 之前版本； Hyper E-Commerce 基础设施 - 经销商集成模块：1.2 之前版本； Hyper E-Com

CVSS 7.5 · High Updated Nov 12, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1110 · Brute Force

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Password Reset via Unverified Email Leading to Account Takeover in Hyper Technology's Hyper E-Commerce Infrastructure

Source: CVE Program / CVE List V5

Vulnerability Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Password Recovery Exploitation. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

忘记口令恢复机制弱

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE
Hyper Teknoloji Ltd. Şti.	Hyper E-Commerce Infrastructure	0 ~ 1.1	-
Hyper Teknoloji Ltd. Şti.	Hyper E-Commerce Infrastructure - dealer integration	0 ~ 1.2	-
Hyper Teknoloji Ltd. Şti.	Hyper E-Commerce Infrastructure - Storefront application and management panel	0 ~ 2.1796	-