medium6.5
CVE-2026-30777
EC-CUBE provided by EC-CUBE CO.,LTD.
Impact
EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ec-Cube | Ec-Cube | from 4.1.0 before 4.1.2 from 4.2.0 before 4.2.3 from 4.3.0 before 4.3.1 Versions 4.1.2, 4.2.3, 4.3.1 |