CVE-2026-11462

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-11462
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11462.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-11462
Published
2026-06-07T22:00:13.496Z
Modified
2026-08-12T03:51:43.904920451Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization
Details

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function callback of the file plugins/Stripe/Controllers/StripeController.php of the component Stripe Plugin. Performing a manipulation of the argument Request results in improper authorization. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named 6719e0fc690ea0a998452092862e0f0a17c65968. It is suggested to install a patch to address this issue.

Database specific 
{
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11462.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.6.0.0"
                },
                {
                    "last_affected": "1.6.0.0"
                },
                {
                    "introduced": "1.6.0.1"
                },
                {
                    "last_affected": "1.6.0.1"
                },
                {
                    "introduced": "1.6.0.2"
                },
                {
                    "last_affected": "1.6.0.2"
                },
                {
                    "introduced": "1.6.0.3"
                },
                {
                    "last_affected": "1.6.0.3"
                },
                {
                    "introduced": "1.6.0.4"
                },
                {
                    "last_affected": "1.6.0.4"
                },
                {
                    "introduced": "1.6.0.5"
                },
                {
                    "last_affected": "1.6.0.5"
                },
                {
                    "introduced": "1.6.0.16"
                },
                {
                    "last_affected": "1.6.0.16"
                },
                {
                    "introduced": "1.6.0.17"
                },
                {
                    "last_affected": "1.6.0.17"
                },
                {
                    "introduced": "1.6.0.20"
                },
                {
                    "last_affected": "1.6.0.20"
                },
                {
                    "introduced": "1.6.0.21"
                },
                {
                    "last_affected": "1.6.0.21"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/beikeshop/beikeshop

Affected ranges

Type
GIT
Repo
https://github.com/beikeshop/beikeshop
Events
Introduced
59079d0e22cc66461d4ebbb37d8ea8b803f37824
Fixed
6719e0fc690ea0a998452092862e0f0a17c65968
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.6.0.6"
        },
        {
            "last_affected": "1.6.0.6"
        },
        {
            "introduced": "1.6.0.7"
        },
        {
            "last_affected": "1.6.0.7"
        },
        {
            "introduced": "1.6.0.8"
        },
        {
            "last_affected": "1.6.0.8"
        },
        {
            "introduced": "1.6.0.9"
        },
        {
            "last_affected": "1.6.0.9"
        },
        {
            "introduced": "1.6.0.10"
        },
        {
            "last_affected": "1.6.0.10"
        },
        {
            "introduced": "1.6.0.11"
        },
        {
            "last_affected": "1.6.0.11"
        },
        {
            "introduced": "1.6.0.12"
        },
        {
            "last_affected": "1.6.0.12"
        },
        {
            "introduced": "1.6.0.13"
        },
        {
            "last_affected": "1.6.0.13"
        },
        {
            "introduced": "1.6.0.14"
        },
        {
            "last_affected": "1.6.0.14"
        },
        {
            "introduced": "1.6.0.15"
        },
        {
            "last_affected": "1.6.0.15"
        },
        {
            "introduced": "1.6.0.18"
        },
        {
            "last_affected": "1.6.0.18"
        },
        {
            "introduced": "1.6.0.19"
        },
        {
            "last_affected": "1.6.0.19"
        },
        {
            "introduced": "1.6.0.22"
        },
        {
            "last_affected": "1.6.0.22"
        }
    ]
}

Affected versions

1.*
1.6.0.10
1.6.0.11
1.6.0.12
1.6.0.13
1.6.0.14
1.6.0.15
1.6.0.18
1.6.0.19
1.6.0.22
1.6.0.6
1.6.0.7
1.6.0.8
1.6.0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11462.json"