CVE-2026-110113
Received Received - Intake

Insecure Direct Object Reference in PublicCMS Allows Address Modification

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: VulnCheck

Description
PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeAddress/save handler that allows authenticated members to modify other members' shipping addresses. Attackers can submit another member's sequential numeric address id to overwrite its addressee, telephone and address fields, since ownership by the session user and site is never verified.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-110113
EUVD
EUVD-2026-98944

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Sanluan PublicCMS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

PublicCMS through V6.202608.a has an insecure direct object reference flaw in the TradeAddressController tradeAddress/save handler. Authenticated members can exploit this to modify other members' shipping addresses by submitting a sequential numeric address ID. The system fails to verify ownership by the session user or site, allowing unauthorized changes to addressee, telephone, and address fields.

Impact Analysis

Attackers with valid credentials could change shipping addresses of other members, leading to delivery of packages to incorrect locations. This could result in lost or stolen goods, financial loss, or reputational damage for affected users or the platform.

Compliance Impact

This vulnerability may violate data integrity and access control requirements under GDPR (e.g., Article 32) and HIPAA (e.g., Security Rule). Unauthorized modifications to shipping addresses could expose personal data to unauthorized parties, risking non-compliance with privacy and security obligations.

Mitigation Strategies

Update PublicCMS to the latest version that patches the insecure direct object reference in TradeAddressController. Ensure proper session-based ownership verification is implemented for shipping address modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110113. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart