All 6 CVE vulnerabilities found in InnoShop, with AI-generated Chinese analysis, references, and POCs.
Vendor: InnoShop
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-108591 | InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool CWE-73 | 4.4 | Medium | 2026-10-10 |
| CVE-2026-18959 | yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal CWE-22 | 5.4 | Medium | 2026-08-05 |
| CVE-2026-7630 | innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication CWE-287 | 7.3 | High | 2026-05-02 |
| CVE-2025-52920 | InnoShop 安全漏洞 CWE-425 | 6.4 | Medium | 2025-06-23 |
| CVE-2025-52921 | InnoShop 安全漏洞 CWE-420 | 9.9 | Critical | 2025-06-23 |
| CVE-2025-52922 | InnoShop 安全漏洞 CWE-23 | 7.4 | High | 2025-06-23 |
All 6 known CVE vulnerabilities affecting InnoShop with full Chinese analysis, references, and POCs where available.