CVE-2026-45055

CubeCart is an ecommerce software solution. Prior to 6.7.2, CubeCart 6.6.x – 6.7.1 builds CC_STORE_URL directly from the Host request header at bootstrap, with no allowlist. The constant is embedded verbatim into transactional email links, most critically the password-reset link in User::passwordRequest() (and the admin equivalent in Admin::passwordRequest()). An unauthenticated attacker who knows a target email can POST /index.php?_a=recover with Host: evil.com; CubeCart writes a fresh verify token (valid 3,600 s) and emails the victim a link http://evil.com/index.php?_a=recovery&validate=<TOKEN>. The token is valid against the legitimate store — capturing the victim's click on evil.com yields full account takeover, or store takeover when an admin email is targeted. This vulnerability is fixed in 6.7.2.

• CWE-20
• CWE-345
• CWE-601
• CWE-784

• https://github.com/cubecart/v6/security/advisories/GHSA-7pvc-gxc4-chmc
• https://github.com/cubecart/v6/security/advisories/GHSA-7pvc-gxc4-chmc

Published

May 13, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45045Fiber is an Express inspired web framework written in Go. Pr…5.3
• CVE-2026-45046Gryph provides a security layer for AI coding agents. Prior …5.5
• CVE-2026-45047bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, th…7.5
• CVE-2026-4505A vulnerability has been found in eosphoros-ai DB-GPT up to …6.3
• CVE-2026-45053CubeCart is an ecommerce software solution. Prior to 6.7.0, …9.1
• CVE-2026-45054CubeCart is an ecommerce software solution. Prior to 6.7.0, …4.9
• CVE-2026-45058electerm is an open-sourced terminal/ssh/sftp/telnet/serialp…9.4
• CVE-2026-4506A vulnerability was found in Mindinventory MindSQL up to 0.2…6.3
• CVE-2026-45060ClipBucket v5 is an open source video sharing platform. Prio…9.8
• CVE-2026-45061Budibase is an open-source low-code platform. Prior to 3.35.…7.7
• CVE-2026-45062FrankenPHP is a modern application server for PHP. From vers…8.1
• CVE-2026-45063Symfony is a PHP framework for web and console applications …9.1