Nivocart
Nivocart Security Releases - October 2026
nivocart-2026-10 Oct 1, 2026 Source: Vendor
Nivocart security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-111277
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-111277
BR2026-0000-032886
nivocart
unclaimed
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying a...
Credited as Aaron Amran Bin Amiruddin
CVE-2026-111278
BR2026-0000-032887
nivocart
unclaimed
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attack...
Credited as Aaron Amran Bin Amiruddin