CVE-2026-39250

Deferred Deferred - Pending Action

Authorization Bypass in Innoshop 0.6.0

Publication date: 2026-05-19

Last updated on: 2026-05-20

Assigner: MITRE

Description

An authorization vulnerability exists in Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangerous operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-19

Last Modified

2026-05-20

Generated

2026-06-30

AI Q&A

2026-05-20

EPSS Evaluated

2026-06-28

NVD

CVE-2026-39250

EUVD

EUVD-2026-30979

Affected Vendors & Products

Vendor	Product	Version / Range
innoshop	innoshop	0.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an authorization flaw in Innoshop version 0.6.0. After a user logs into the frontend, an attacker can bypass normal access controls and directly access backend application interfaces. This unauthorized access can allow the attacker to perform further dangerous operations within the application.

Impact Analysis

The vulnerability can lead to unauthorized access to backend systems after frontend login, potentially allowing attackers to perform harmful actions such as modifying data, accessing sensitive information, or disrupting application functionality.

Compliance Impact

The vulnerability in Innoshop 0.6.0 allows an attacker to bypass authorization controls and access backend application interfaces after logging into the frontend. This unauthorized access could lead to exposure or manipulation of sensitive data.

Such unauthorized access and potential data compromise can negatively impact compliance with common standards and regulations like GDPR and HIPAA, which require strict access controls and protection of personal and sensitive information.

Hi! I’m here to help you understand CVE-2026-39250. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70