CVE-2026-14800

A weakness has been identified in imhamzaazam ecommerceFlask up to cb7d9e24c30a99379651b7493b32048126ef402b. The affected element is an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-352
• CWE-862

• https://github.com/imhamzaazam/ecommerceFlask/
• https://github.com/imhamzaazam/ecommerceFlask/issues/1
• https://vuldb.com/cve/CVE-2026-14800
• https://vuldb.com/submit/850853
• https://vuldb.com/vuln/376394
• https://vuldb.com/vuln/376394/cti

Published

Jul 6, 2026

Last Modified

Jul 6, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-14795A vulnerability has been found in CodeAstro Apartment Visito…6.3
• CVE-2026-14796A vulnerability was found in CodeAstro Apartment Visitor Man…6.3
• CVE-2026-14797A vulnerability was determined in CodeAstro Apartment Visito…6.3
• CVE-2026-14798A vulnerability was identified in CodeAstro Apartment Visito…6.3
• CVE-2026-14799A security flaw has been discovered in CodeAstro Ecommerce W…6.3
• CVE-2026-1480An out-of-band SQL injection vulnerability (OOB SQLi) has be…7.5
• CVE-2026-14801A security vulnerability has been detected in GPAC 26.03-DEV…4.8
• CVE-2026-14802A vulnerability was detected in react create-react-app up to…7.3
• CVE-2026-14803Mojo::JSON versions before 9.47 for Perl allow memory exhaus…6.5
• CVE-2026-14804Use of hard-coded cryptographic key vulnerability in Bilin S…9.1
• CVE-2026-14805The Consulting theme for WordPress is vulnerable to Privileg…8.8
• CVE-2026-14807ERP App developed by PROG MIS has a Use of Hard-coded Creden…9.8