CVE-2026-66709
Received Received - Intake

Shop Manager RCE in CTX Feed Plugin

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Patchstack

Description
Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-66709
EUVD
EUVD-2026-53912

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
webappick ctx_feed_plugin to 6.6.42 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Remote Code Execution (RCE) flaw in the CTX Feed plugin versions up to and including 6.6.42. It allows an attacker with shop manager privileges to execute arbitrary code on the affected system.

Impact Analysis

An attacker exploiting this vulnerability could gain full control over the website, steal sensitive data, install malware, or disrupt services. The high CVSS score of 9.1 indicates severe impact.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR and HIPAA requirements. Organizations may face fines and legal consequences for failing to protect sensitive information.

Mitigation Strategies

Update CTX Feed to a version higher than 6.6.42 immediately to patch the RCE vulnerability. Disable or restrict access to the shop manager interface if an update is not immediately available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66709. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart