Is there a public PoC exploit available for CVE-2026-82922?

Yes, a public proof-of-concept exploit is available for CVE-2026-82922. Prioritise patching immediately. EPSS: 0.3%.

ECShop CVE-2026-82922

Q: What is the CVSS score of CVE-2026-82922?

CVE-2026-82922 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-68893 MEDIUM

SQL Injection (CWE-89)

2026-08-31 VulDB

GHSA-f5x9-jgf8-wfg7

PHP SQLi Ecshop Shopex

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.4 CRITICAL

Unauthenticated network SQLi with no complexity; e-commerce DB likely holds PII and credentials, justifying C:H/I:H over the conservative L/L/L in the provided CVSS 4.0.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Aug 31, 2026 - 22:22 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

Analysis Generated

Aug 31, 2026 - 22:11 vuln.today

CVE Published

Aug 31, 2026 - 21:30 cve.org

MEDIUM 6.9

DescriptionCVE.org

A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flow_update_cart of the file /flow.php?step=update_cart. The manipulation of the argument rec_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Unauthenticated SQL injection in ShopEx ECShop up to version 2.5.1 exposes e-commerce installations to remote database compromise via the cart update endpoint. The vulnerable parameter rec_id in /flow.php?step=update_cart is passed to the flow_update_cart function without sanitization, allowing remote attackers to execute arbitrary SQL queries against the backend database. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No authentication is required - the /flow.php cart update endpoint is part of the public-facing shopping flow and is accessible to any remote user without login. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The combination of unauthenticated remote access (PR:N, AV:N), no attack complexity (AC:L), and a publicly available proof-of-concept raises the operational priority of this issue beyond its nominal CVSS 4.0 score of 6.9. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch identified at time of analysis - ShopEx did not respond to coordinated disclosure. … Detailed patch versions, workarounds, and compensating controls in full report.