Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119558— OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

Quick assessment

Affected
OpenCart OpenCart
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenCart 4.1.0.4 及以下版本存在一个业务逻辑漏洞，允许已登录的客户在选择“免费结账（Free Checkout）”后清除奖励积分，从而提交未付款的全价订单。攻击者可先应用积分并保存“免费结账”状态，随后通过 接口提交零积分，致使确认处理器将订单推进至“免费结账”状态，而无需实际支付。

CVSS 3.1 · Low

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 1

VendorProduct Version RangeStatus
OpenCart OpenCart ≤ 4.1.0.4 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119558

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points
Source: CVE Program / CVE List V5
Vulnerability Description
OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handler advances the order to Free Checkout status without payment.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
行为工作流的不恰当实施
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
OpenCart OpenCart 0 ~ 4.1.0.4 -

II. Public POCs for CVE-2026-119558

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119558

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-119558 (1)

Proof of Concept for CVE-2026-119558 (1)

Security Blog Posts for CVE-2026-119558 (1)

Vendor Pages for CVE-2026-119558 (2)

IV. Related Vulnerabilities

Same product: OpenCart
Same vendor: OpenCart
Same weakness: CWE-841